Bug 222219

Summary: multimedia/mythtv: PORTVERSION is for fixed version 0.28.7, installs vulnerable version 0.27.5
Product: Ports & Packages Reporter: robbak
Component: Individual Port(s)Assignee: Tobias Kortkamp <tobik>
Status: Closed FIXED    
Severity: Affects Some People CC: tobik
Priority: ---    
Version: Latest   
Hardware: Any   
OS: Any   

Description robbak 2017-09-11 08:51:41 UTC 
The last update to this port was messed up badly. Somehow the patches applied didn't update the all important github hash, meaning that the port still pulls in the sources for the old, vulnerable version.

This also applies to the multimedia/mythtv-frontend port.
Comment 1 commit-hook freebsd_committer freebsd_triage 2017-12-20 23:29:58 UTC 
A commit references this bug:

Author: tobik
Date: Wed Dec 20 23:29:03 UTC 2017
New revision: 456874
URL: https://svnweb.freebsd.org/changeset/ports/456874

Log:
  multimedia/mythtv{,-frontend}: Revert placebo version updates

  In r440321 and r440322 PORTVERSION was bumped to 0.28.7/0.28.1, but
  GH_TAGNAME was not updated.  Commit ad97d24 is tagged as v0.27.5 [1].

  Reset version back to 0.27.5 and bump PORTEPOCH.

  [1] https://github.com/MythTV/mythtv/releases/tag/v0.27.5

  PR:		222219
  Reported by:	robbak@gmail.com
  Pointy hat:	miwi

Changes:
  head/multimedia/mythtv/Makefile
  head/multimedia/mythtv/distinfo
  head/multimedia/mythtv-frontend/Makefile
  head/multimedia/mythtv-frontend/distinfo