Attachment 234527 Details for Bug 264523 – Upgrade Turba to 4.2.27 and fix a vulnerability

[patch] Upgrade Turba to 4.2.27 and fix a vulnerability

mail_horde-turba.diff (text/plain), 1.38 KB, created by Thierry Thomas on 2022-06-07 16:12:10 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Thierry Thomas

Created: 2022-06-07 16:12:10 UTC

Size: 1.38 KB

patch

obsolete

>From 7c1faf43ffa871ac89f8ea62d8bef26b0e36f176 Mon Sep 17 00:00:00 2001
>From: Thierry Thomas <thierry@FreeBSD.org>
>Date: Tue, 7 Jun 2022 14:38:03 +0200
>Subject: [PATCH] mail/horde-turba: upgrade Turba to 4.2.27 and fix a
> vulnerability
>
>Fix remote code execution by an unserialization attack (CVE-2022-30287)
>
>Changelog at
><https://github.com/horde/turba/blob/f16608bfa3e9a15817cc4ed2be9f3a0136ff338f/docs/CHANGES>
>
>Security:	CVE-2022-30287
>---
> mail/horde-turba/Makefile | 2 +-
> mail/horde-turba/distinfo | 6 +++---
> 2 files changed, 4 insertions(+), 4 deletions(-)
>
>diff --git a/mail/horde-turba/Makefile b/mail/horde-turba/Makefile
>index 6b600db6d472..6f6f244b4fff 100644
>--- a/mail/horde-turba/Makefile
>+++ b/mail/horde-turba/Makefile
>@@ -1,5 +1,5 @@
> PORTNAME=	turba
>-PORTVERSION=	4.2.25
>+PORTVERSION=	4.2.27
> CATEGORIES=	mail www pear
> PKGNAMEPREFIX=	${PHP_PKGNAMEPREFIX}horde-
> 
>diff --git a/mail/horde-turba/distinfo b/mail/horde-turba/distinfo
>index a0eee0f75bf6..d3c8ae52ddd8 100644
>--- a/mail/horde-turba/distinfo
>+++ b/mail/horde-turba/distinfo
>@@ -1,3 +1,3 @@
>-TIMESTAMP = 1559196860
>-SHA256 (Horde/turba-4.2.25.tgz) = 5e8485f400a51458d136be5cfcc2a736735aaec551a4200f38d2d94114ae13ef
>-SIZE (Horde/turba-4.2.25.tgz) = 2002750
>+TIMESTAMP = 1654603660
>+SHA256 (Horde/turba-4.2.27.tgz) = c5a5e62197d7b9bb8f15c050f4e80ff938b7221234798184fa2b55e8cd0352fc
>+SIZE (Horde/turba-4.2.27.tgz) = 2003438
>-- 
>2.36.1
>

Actions: View | Diff

Attachments on bug 264523: 234527 | 234685 | 234777