Seen today on oss-security mailing list:
I will update the ports once the fixed versions have been released. As of minutes ago, they are not yet out.
Thanks. We should just need an MFH to 2015Q3 of the 2.2.7 -> 2.2.8 update then PR is ready for close.
Port updated to 2.2.8