Bug 209594
| Summary: | security/botan110: CVE-2016-2849 | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Ports & Packages | Reporter: | Sevan Janiyan <venture37> | ||||
| Component: | Individual Port(s) | Assignee: | Jason Unovitch <junovitch> | ||||
| Status: | Closed FIXED | ||||||
| Severity: | Affects Only Me | CC: | junovitch, lapo, ports-secteam | ||||
| Priority: | --- | Keywords: | needs-qa | ||||
| Version: | Latest | Flags: | vlad-fbsd:
maintainer-feedback+
junovitch: merge-quarterly+ |
||||
| Hardware: | Any | ||||||
| OS: | Any | ||||||
| See Also: | https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209595 | ||||||
| Attachments: |
|
||||||
|
Description
Sevan Janiyan
2016-05-18 02:10:19 UTC
The 1.10.13 port is ready (it's actually just a bump), but I'm waiting for the formal upstream release in order to have an official source of the fixed bugs: https://botan.randombit.net/news.html (In reply to Lapo Luchini from comment #1) There was a announcement on the list https://lists.randombit.net/pipermail/botan-devel/2016-April/002101.html Guys, what's the status on this? Lapo, could you perhaps do the vuxml entry patch if the port update is not ready yet? Created attachment 171388 [details]
Upgrade to 1.10.13
The port itself has been long ready, it's the VuXML which isn't yet. A commit references this bug: Author: junovitch Date: Tue Jun 14 01:49:13 UTC 2016 New revision: 416873 URL: https://svnweb.freebsd.org/changeset/ports/416873 Log: security/botan110: update 1.10.12 -> 1.10.13 PR: 209594 Reported by: Sevan Janiyan <venture37@geeklan.co.uk> Submitted by: Lapo Luchini <lapo@lapo.it> (maintainer) Security: CVE-2015-7827 Security: CVE-2016-2849 Security: https://vuxml.FreeBSD.org/freebsd/ac0900df-31d0-11e6-8e82-002590263bf5.html MFH: 2016Q2 Changes: head/security/botan110/Makefile head/security/botan110/distinfo Committed. Thanks! A commit references this bug: Author: junovitch Date: Tue Jun 14 01:50:34 UTC 2016 New revision: 416874 URL: https://svnweb.freebsd.org/changeset/ports/416874 Log: MFH: r416873 security/botan110: update 1.10.12 -> 1.10.13 PR: 209594 Reported by: Sevan Janiyan <venture37@geeklan.co.uk> Submitted by: Lapo Luchini <lapo@lapo.it> (maintainer) Approved by: ports-secteam (with hat) Security: CVE-2015-7827 Security: CVE-2016-2849 Security: https://vuxml.FreeBSD.org/freebsd/ac0900df-31d0-11e6-8e82-002590263bf5.html Changes: _U branches/2016Q2/ branches/2016Q2/security/botan110/Makefile branches/2016Q2/security/botan110/distinfo |
