Created attachment 221444 [details] Patch against /usr/ports/devel/nexus2-oss Port maintainer here. Tested on 11.4-RELEASE/12.2-RELEASE with Java 8, 11, 14, 15 with poudriere.
Build and package info is available at https://gitlab.com/swills/freebsd-ports/pipelines/239675951
^Triage: If there is a changelog or release notes URL available for this version, please add it to the URL field. ^Triage: Please set the maintainer-approval attachment flag (to +) on patches for ports you maintain to signify approval. -- Attachment -> Details -> maintainer-approval [+] ^Triage: Maintainer-feedback flag (+) not required unless requested (?) first. Thanks!
Kyle, can you apply this patch? Thanks!
^Triage: .19 and .20 are security updates, VuXML entry and merge (MFH)vuxml
Can this be merged before the next quartely branch is created?
(In reply to Michael Osipov from comment #3) Sorry, I'll pick this up tomorrow (well, later today -- it's 02:50 here). There are CVEs issued, so we'll need to write up a VuXML entry to go with this.
(In reply to Kyle Evans from comment #6) Thank you Kyle!
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=1e427d25951275287b076cabfd8b0c941beec269 commit 1e427d25951275287b076cabfd8b0c941beec269 Author: Kyle Evans <kevans@FreeBSD.org> AuthorDate: 2021-09-29 05:50:10 +0000 Commit: Kyle Evans <kevans@FreeBSD.org> CommitDate: 2021-09-29 05:52:49 +0000 devel/nexus2-oss: update to 2.14.20-02 This is primarily a secure release; 2.14.20 also includes: - [NEXUS-25956] Signatures with ECC algorithm not being recognized PR: 252564 Security: b2f1f86f-20e6-11ec-a574-080027eedc6a Security: 730e922f-20e7-11ec-a574-080027eedc6a MFH: 2021Q3 devel/nexus2-oss/Makefile | 6 +++--- devel/nexus2-oss/distinfo | 6 +++--- devel/nexus2-oss/pkg-plist | 52 +++++++++++++++++++++++----------------------- 3 files changed, 32 insertions(+), 32 deletions(-)
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=6960fe90127df6082d59649f93437580c1f0afa7 commit 6960fe90127df6082d59649f93437580c1f0afa7 Author: Kyle Evans <kevans@FreeBSD.org> AuthorDate: 2021-09-29 05:42:09 +0000 Commit: Kyle Evans <kevans@FreeBSD.org> CommitDate: 2021-09-29 05:52:41 +0000 security/vuxml: document recent nexus2-oss vulnerabilities PR: 252564 security/vuxml/vuln-2021.xml | 52 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 52 insertions(+)
A commit in branch 2021Q3 references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=07b3d79b46db75d4e1353beeb0023456de429e26 commit 07b3d79b46db75d4e1353beeb0023456de429e26 Author: Kyle Evans <kevans@FreeBSD.org> AuthorDate: 2021-09-29 05:50:10 +0000 Commit: Kyle Evans <kevans@FreeBSD.org> CommitDate: 2021-09-29 05:57:34 +0000 devel/nexus2-oss: update to 2.14.20-02 This is primarily a secure release; 2.14.20 also includes: - [NEXUS-25956] Signatures with ECC algorithm not being recognized PR: 252564 Security: b2f1f86f-20e6-11ec-a574-080027eedc6a Security: 730e922f-20e7-11ec-a574-080027eedc6a (cherry picked from commit 1e427d25951275287b076cabfd8b0c941beec269) devel/nexus2-oss/Makefile | 6 +++--- devel/nexus2-oss/distinfo | 6 +++--- devel/nexus2-oss/pkg-plist | 52 +++++++++++++++++++++++----------------------- 3 files changed, 32 insertions(+), 32 deletions(-)
Sorry, I forgot to reset --author on the patch to the port itself, but it is done- Thanks for the submission!
Fantastic, thank you!
@kevans The commits contain a bug. The Patch version has been incorrectly applied. While my patch contains .20, the changeset says .02. Can you fix this please?
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=46599b3120eac3346eae74c4056cd294fbdd9922 commit 46599b3120eac3346eae74c4056cd294fbdd9922 Author: Kyle Evans <kevans@FreeBSD.org> AuthorDate: 2021-09-29 14:04:05 +0000 Commit: Kyle Evans <kevans@FreeBSD.org> CommitDate: 2021-09-29 14:05:18 +0000 devel/nexus2-oss: fix inappropriately transcribed patch PR: 252564 Pointyhat: kevans devel/nexus2-oss/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
A commit in branch 2021Q3 references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=9fb203bbb03290926b3d5539d1982425838801b5 commit 9fb203bbb03290926b3d5539d1982425838801b5 Author: Kyle Evans <kevans@FreeBSD.org> AuthorDate: 2021-09-29 14:04:05 +0000 Commit: Kyle Evans <kevans@FreeBSD.org> CommitDate: 2021-09-29 14:07:09 +0000 devel/nexus2-oss: fix inappropriately transcribed patch PR: 252564 Pointyhat: kevans (cherry picked from commit 46599b3120eac3346eae74c4056cd294fbdd9922) devel/nexus2-oss/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
(In reply to Michael Osipov from comment #13) Sorry about that- there was a patch conflict and I had ended up reapplying it on two different machines, but resolved it incorrectly the second time. :-( Fixed and re-tested.