FreeBSD ports tree https://cgit-dev.freebsd.org/ports/atom?h=10-eol 2018-10-23T11:35:03Z 2018-10-23T11:35:03Z Jan Beich jbeich@FreeBSD.org 2018-10-23T11:35:03Z urn:sha1:91f9922c6fe8f4a055c073d5e1f6e86c76fd37dc Changes: http://site.icu-project.org/download/63 ABI: https://abi-laboratory.pro/tracker/timeline/icu4c/ PR: 232300 Exp-run by: antoine 2018-09-10T13:14:50Z Mathieu Arnold mat@FreeBSD.org 2018-09-10T13:14:50Z urn:sha1:e1bfdfbe5665c963621e06f6bbfbbc2c000a804e Also various fixes related to said option. PR: 230864 Submitted by: mat exp-runs by: antoine 2018-08-10T09:25:20Z Palle Girgensohn girgen@FreeBSD.org 2018-08-10T09:25:20Z urn:sha1:0ef5b1677131d55233b49572e4b450a9461718fd versions of our database system, including 10.5, 9.6.10, 9.5.14, 9.4.19, 9.3.24. This release fixes two security issues as well as bugs reported over the last three months. If you have untrusted users accessing your system and you are either running PostgreSQL 9.5 or a newer version OR have installed the "dblink" or "postgres_fdw" extensions, you must apply this update as soon as possible. All other users can upgrade at the next convenient downtime. Please note that PostgreSQL changed its versioning scheme with the release of version 10.0, so updating to version 10.5 from any 10.x release is considered a minor update. The PostgreSQL Global Development Group also announces that the third beta release of PostgreSQL 11 is now available for download. This release contains previews of all features that will be available in the final release of PostgreSQL 11 (though some details of the release could change before then) as well as bug fixes that were reported during the second beta. This release also changes the default option for the server packages to *not* include XML support per default. If you need this, please check the XML option knob and build the port. Releasenotes: https://www.postgresql.org/about/news/1878/ PR: 229523, 198588 Security: 96eab874-9c79-11e8-b34b-6cc21735f730 Security: CVE-2018-10915, CVE-2018-10925 2018-06-29T14:22:11Z Jan Beich jbeich@FreeBSD.org 2018-06-29T14:22:11Z urn:sha1:3beb732dad3e5e47fb7b738b8b012a8bba15db80 Changes: http://site.icu-project.org/download/62 ABI: https://abi-laboratory.pro/tracker/timeline/icu4c/ PR: 229359 Exp-run by: antoine (only 10.4) 2018-05-11T13:10:52Z Palle Girgensohn girgen@FreeBSD.org 2018-05-11T13:10:52Z urn:sha1:05a6a492f1ea34dafe6f37f4d39a6159c9e0212e The PostgreSQL Global Development Group has released an update to all supported versions of our database system, including 10.4, 9.6.9, 9.5.13, 9.4.18, 9.3.23. This release fixes one security issue as well as several bugs reported over the last three months. Users should plan to update at the next convenient downtime. Please see the "Updating" section for post-installation steps for the security fix and the "incorrect volatility and parallel-safety markings" fix. Releasenotes: https://www.postgresql.org/about/news/1851/ Security: CVE-2018-1115 Too-permissive access control list on function pg_logfile_rotate() FreeBSD's port of PostgreSQL uses syslog by default, so the above security problem is only a problem if you changed the logging configuration. Please visit the releasenotes linked above and take the actions needed. 2018-05-07T19:21:00Z Sunpoet Po-Chuan Hsieh sunpoet@FreeBSD.org 2018-05-07T19:21:00Z urn:sha1:a7ffaf3f20eab6507fff0475ef1b5dddc610ef31 Approved by: portmgr (blanket) 2018-04-06T15:53:16Z Jan Beich jbeich@FreeBSD.org 2018-04-06T15:53:16Z urn:sha1:ae60358af51e1fe194525a699ceaf9d8a0ac712b Changes: http://site.icu-project.org/download/61 ABI: https://abi-laboratory.pro/tracker/timeline/icu4c/ PR: 227042 Exp-run by: antoine MFH: 2018Q2 (required by Firefox 61) 2018-03-01T15:10:17Z Palle Girgensohn girgen@FreeBSD.org 2018-03-01T15:10:17Z urn:sha1:70184a53b3d536dd32ba568c5326e1bcd5eabe27 The PostgreSQL Global Development Group has released an update to all supported versions of the PostgreSQL database system, including 10.3, 9.6.8, 9.5.12, 9.4.17, and 9.3.22. The purpose of this release is to address CVE-2018-1058, which describes how a user can create like-named objects in different schemas that can change the behavior of other users' queries and cause unexpected or malicious behavior, also known as a "trojan-horse" attack. Most of this release centers around added documentation that describes the issue and how to take steps to mitigate the impact on PostgreSQL databases. We strongly encourage all of our users to please visit https://wiki.postgresql.org/wiki/A_Guide_to_CVE-2018-1058:_Protect_Your_Search_Path for a detailed explanation of CVE-2018-1058 and how to protect your PostgreSQL installations. After evaluating the documentation for CVE-2018-1058, a database administrator may need to take follow up steps on their PostgreSQL installations to ensure they are protected from exploitation. Security: CVE-2018-1058 2018-02-15T14:41:29Z Bernard Spil brnrd@FreeBSD.org 2018-02-15T14:41:29Z urn:sha1:3b1875b2736807a51268d6a9fef21304c61a014a * databases/freetds: Fixed 2017-02-14 * databases/postgresql10-server: Fixed 2016-09-15 [1] * ftp/lftp: Fixed in 4.8.0 * ftp/proftpd: Fixed in 1.3.5c * ftp/wget: Fixed in 1.19.3 [2] * lang/erlang-runtime20: Fixed in 20.0 * net/socat: Fixed in 1.7.3.2 * security/libssh2: Fixed in 1.8.0 [3] * security/p5-Crypt-OpenSSL-X509: Fixed in 1.8.8 * sysutils/bacula9-server: Fixed in 9.0.6 * www/nginx: Fixed in 1.9.14 * Bulk build OK 10.3/11.1 both i386 and amd64: - multimedia/librtmp - net/libvncserver - www/lynx PR: 225875 [1], 225872 [2], 225873 [3] 2018-02-08T19:58:22Z Antoine Brodin antoine@FreeBSD.org 2018-02-08T19:58:22Z urn:sha1:8f309e483246e97ba88cd909489578f4be1a368d With hat: portmgr