Bug 249473 - www/tt-rss: Update to g20200919 (Fixes several security vulnerabilities)
Summary: www/tt-rss: Update to g20200919 (Fixes several security vulnerabilities)
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Many People
Assignee: freebsd-ports-bugs (Nobody)
URL:
Keywords: buildisok, needs-qa, security
Depends on: 249472
Blocks:
  Show dependency treegraph
 
Reported: 2020-09-20 04:07 UTC by Derek Schrock
Modified: 2020-09-30 20:33 UTC (History)
2 users (show)

See Also:
dereks: merge-quarterly?


Attachments
Update to g20200919 05ef9aac2 (4.23 KB, patch)
2020-09-20 04:07 UTC, Derek Schrock
dereks: maintainer-approval+
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Derek Schrock 2020-09-20 04:07:29 UTC
Created attachment 218101 [details]
Update to g20200919 05ef9aac2

- Update to g20200919 05ef9aac2
- Require filter module
- Security fixes [1][2]:
  - CVE-2020-25789 da5af2fae09
  - CVE-2020-25788 c3d14e1fa54
  - CVE-2020-25787 c3d14e1fa54
  - CVE-2016-6175 3588d5186e


portlint: ok. 2 expected warnings.
testport: ok. 12amd64.

vuxml created https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=249472
Comment 1 Automation User 2020-09-20 04:35:42 UTC
Build info is available at https://gitlab.com/swills/freebsd-ports/pipelines/192092619
Comment 2 Thierry Thomas freebsd_committer freebsd_triage 2020-09-30 20:32:45 UTC
Committed, thanks!
Comment 3 commit-hook freebsd_committer freebsd_triage 2020-09-30 20:33:11 UTC
A commit references this bug:

Author: thierry
Date: Wed Sep 30 20:32:34 UTC 2020
New revision: 550748
URL: https://svnweb.freebsd.org/changeset/ports/550748

Log:
  - Update to g20200919 05ef9aac2
  - Require filter module
  - Security fixes [1][2]:
    - CVE-2020-25789 da5af2fae09
    - CVE-2020-25788 c3d14e1fa54
    - CVE-2020-25787 c3d14e1fa54
    - CVE-2016-6175 3588d5186e

  PR:		249473
  Submitted by:	Derek Schrock (maintainer)
  MFH:		1 day
  Security:	Several CVE.

Changes:
  head/www/tt-rss/Makefile
  head/www/tt-rss/distinfo
  head/www/tt-rss/pkg-plist