FreeBSD ports tree https://cgit-dev.freebsd.org/ports/atom?h=2017Q3 2017-10-08T13:11:17Z 2017-10-08T13:11:17Z Jason E. Hale jhale@FreeBSD.org 2017-10-08T13:11:17Z urn:sha1:a16d9e9f97932862f4433c03ee35493ec26fd29d Update to 0.18.5 This addresses CVE-2017-14265, CVE-2017-14348, and CVE-2017-14608 Use FreeBSD libc strnlen and strcasestr functions instead of bundled [1] PR: 219029 [1] Submitted by: mi [1] Security: 4cd857d9-26d2-4417-b765-69701938f9e0 Security: d9f96741-47bd-4426-9aba-8736c0971b24 Security: 02bee9ae-c5d1-409b-8a79-983a88861509 Approved by: ports-secteam (swills) 2017-10-06T19:26:39Z Jan Beich jbeich@FreeBSD.org 2017-10-06T19:26:39Z urn:sha1:be9be33bc2745a82877feb3c3ebf7cac022b5417 mail/thunderbird: update to 52.4.0 Changes: https://www.mozilla.org/thunderbird/52.4.0/releasenotes/ Security: 1098a15b-b0f6-42b7-b5c7-8a8646e8be07 Approved by: ports-secteam (zi) 2017-10-04T16:51:01Z Jan Beich jbeich@FreeBSD.org 2017-10-04T16:51:01Z urn:sha1:b5fbc73a59a6ad90bfbec91fb260e4e27c4e02f2 games/manaplus: update to 1.7.9.16 - Lift BROKEN on powerpc64 per upstream fix (untested) Changes: https://manaplus.org/changelog#new_release_17916 PR: 221748 222544 Submitted by: Thibault Payet <monwarez@mailoo.org> (maintainer) Approved by: ports-secteam (zi) 2017-10-01T07:10:46Z Jan Beich jbeich@FreeBSD.org 2017-10-01T07:10:46Z urn:sha1:1d7eb406b730278270edd6bec3dce3067a998187 games/openra: update GeoLite2 to September snapshot fetch: https://geolite.maxmind.com/download/geoip/database/GeoLite2-Country.mmdb.gz: size mismatch: expected 1454069, actual 1564896 Approved by: ports-secteam blanket 2017-09-28T20:14:21Z Jan Beich jbeich@FreeBSD.org 2017-09-28T20:14:21Z urn:sha1:32369bebd84fa26bc5e2fb27fdc9fd4ca0fd0334 audio/festival: unbreak on most non-x86 archs gmake[1]: Entering directory '/wrkdirs/usr/ports/audio/festival/work/speech_tools' Check system type ../config/config:197: ../config/systems/mips_unknown.mak: No such file or directory gmake[1]: *** No rule to make target '../config/systems/mips_unknown.mak'. Stop. Approved by: ports-secteam blanket 2017-09-28T19:43:06Z Jan Beich jbeich@FreeBSD.org 2017-09-28T19:43:06Z urn:sha1:c85b277e749880f4aff497c480483a9ebe063215 audio/liba52: build PIC objects on all architectures PR: 215974 Reported by: mmel Inspired by: ArchLinux, Gentoo, Debian Reviewed by: tijl (implicit) Approved by: ports-secteam blanket 2017-09-28T13:27:12Z Jochen Neumeister joneum@FreeBSD.org 2017-09-28T13:27:12Z urn:sha1:957e33a8129245b6248d605b57cce494b5465764 - Update to 4.8.2 - Changelog: https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/ Approved by: mentors (implicit) Approved by: portmgr (swills) 2017-09-28T05:30:31Z Jan Beich jbeich@FreeBSD.org 2017-09-28T05:30:31Z urn:sha1:d9d75990a73e1bdf15cd169b19868d911ee7abf9 www/firefox-esr: update to 52.4.0 Changes: https://www.mozilla.org/firefox/52.4.0/releasenotes/ Security: 1098a15b-b0f6-42b7-b5c7-8a8646e8be07 Approved by: portmgr (swills) 2017-09-27T17:01:15Z Bernard Spil brnrd@FreeBSD.org 2017-09-27T17:01:15Z urn:sha1:d42c8a45495506c526083c44eb6eb09a61a2df11 irc/weechat: Update to 1.9 - Bugfix update to 1.9 irc/weechat: Security update to 1.9.1 - Fixes crash in logger Security: b63421b6-a1e0-11e7-ac58-b499baebfeaf Approved by: ports-secteam (swills) 2017-09-27T16:53:51Z Raphael Kubo da Costa rakuco@FreeBSD.org 2017-09-27T16:53:51Z urn:sha1:4f54b38ba9c5d38183b4303d7bc9bf54eb5c285f Add a patch for CVE-2017-14107. This is a minor security vulnerability that can lead to a denial of service issue in libzip when a specially crafted archive is used. PR: 222638 Security: b2952517-07e5-4d19-8850-21c5b7e0623f Security: CVE-2017-14107 Approved by: ports-secteam (blanket approval)