<feed xmlns='http://www.w3.org/2005/Atom'>
<title>ports/security, branch release/12.3.0</title>
<subtitle>FreeBSD ports tree</subtitle>
<id>https://cgit-dev.freebsd.org/ports/atom?h=release%2F12.3.0</id>
<link rel='self' href='https://cgit-dev.freebsd.org/ports/atom?h=release%2F12.3.0'/>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/ports/'/>
<updated>2021-11-08T14:50:17Z</updated>
<entry>
<title>security/clamav-lts: Fix plist error</title>
<updated>2021-11-08T14:50:17Z</updated>
<author>
<name>Yasuhiro Kimura</name>
<email>yasu@FreeBSD.org</email>
</author>
<published>2021-11-08T14:18:27Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/ports/commit/?id=7e2c4c33757e18feb6262ea8891bb4dc9d35a22c'/>
<id>urn:sha1:7e2c4c33757e18feb6262ea8891bb4dc9d35a22c</id>
<content type='text'>
Fix plist error when user sets CLAMAVUSER to non-default value.

This is direct commit to 2021Q4 branch as the commit that causes plist
error is also direct one.

PR:		259663
Reported by:	ml at netfence dot it
Fixes:		2da7ca992591 (security/clamav: Update to new bugfix release 0.103.4)
Approved by:	fluffy (ports-secteam)
</content>
</entry>
<entry>
<title>security/mailzu: Fix runtime error with recent PHP</title>
<updated>2021-11-05T01:19:58Z</updated>
<author>
<name>Krzysztof</name>
<email>ports@bsdserwis.com</email>
</author>
<published>2021-11-05T01:12:22Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/ports/commit/?id=8393cce3d02881f00e32cc93b3a716242af34fb3'/>
<id>urn:sha1:8393cce3d02881f00e32cc93b3a716242af34fb3</id>
<content type='text'>
* Pet portclippy
* Re-format Makefile with portfmt

PR:		241745
MFH:		2021Q4
(cherry picked from commit c99114e14f7c799db21764b80ef612e9763e0a61)
</content>
</entry>
<entry>
<title>security/clamav: Update to new bugfix release 0.103.4</title>
<updated>2021-11-04T14:47:40Z</updated>
<author>
<name>Yasuhiro Kimura</name>
<email>yasu@FreeBSD.org</email>
</author>
<published>2021-11-03T19:05:09Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/ports/commit/?id=2da7ca99259179c730a901822b0694f801f0316d'/>
<id>urn:sha1:2da7ca99259179c730a901822b0694f801f0316d</id>
<content type='text'>
This is direct commit to 2021Q4 branch. The reason that it is not MFH
is as following.

* On September upstream changed their release and support policy as
  following.
  - They release Regular Feature Release (= x.y.0 release) more
    frequently. And x.y.z releases are supported until 4 months after
    the release of x.(y+1).0.
  - To compensate for the short lifetime of Regular Feature Releases,
    Long Term Support (LTS) Feature Release is introduced. A new LTS
    Feature Release will be identified approximately every two years
    and be supported for at least three years from the initial
    publication date of that LTS feature version.
* Version 0.103.3 was identified as first LTS Feature Release.
* After 2021Q4 branch was created, on main brach security/clamav was
  updated to 0.104.0 and security/clamav-lts was added.
* Version 0.104.0 is first Regular Feature Release that new upstream
  policy is applied. There are large chages between 0.103.3 and
  0.104.0 as upstream refactored their code base.
* On November 3rd new bugfix releases 0.104.1 and 0.103.4 were
  released. On main branch I already updated both security/clamav
  and security/clamav-lts to their latest releases.
* As is exlained above lifetime of 0.104.x isn't so long and there is
  large difference between 0.103.x and 0.104.x. Furthermore there
  isn't security/clamav-lts in 2021Q4 branch that can be selected as
  alternative for those who look for longer lifetime.
* So merging 0.104.x to 2021Q4 isn't appropriate in this case and I
  select to update security/clamav to 0.103.3.

ReleaseNotes:	https://blog.clamav.net/2021/11/clamav-01034-and-01041-patch-releases.html
PR:		259641
Approved by:	fluffy (ports-secteam@)
</content>
</entry>
<entry>
<title>security/openvpn: create and use dedicated openvpn user</title>
<updated>2021-11-01T17:03:06Z</updated>
<author>
<name>Matthias Andree</name>
<email>mandree@FreeBSD.org</email>
</author>
<published>2021-10-31T17:37:47Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/ports/commit/?id=96dcd4f08fcfd954d67e63f0dcf5264a275f6bc7'/>
<id>urn:sha1:96dcd4f08fcfd954d67e63f0dcf5264a275f6bc7</id>
<content type='text'>
(two commits squashed for clarity)

PR:		259384

(cherry picked from commit bb6ec079c50dc6f45700dd5897b35f66a19ee51c)
(cherry picked from commit 89d9e9320aff2d4c61be4c7dfa1b6829717bd034)
</content>
</entry>
<entry>
<title>security/openvpn: bugfix update to 2.5.4</title>
<updated>2021-11-01T17:02:52Z</updated>
<author>
<name>Matthias Andree</name>
<email>mandree@FreeBSD.org</email>
</author>
<published>2021-10-05T19:53:19Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/ports/commit/?id=f1ecb9fb36f287ec18459cfd2928bc7d7fc63495'/>
<id>urn:sha1:f1ecb9fb36f287ec18459cfd2928bc7d7fc63495</id>
<content type='text'>
adds openvpn-examples(5) manual page

Changelog:
https://github.com/OpenVPN/openvpn/blob/release/2.5/Changes.rst#overview-of-changes-in-254
(cherry picked from commit cf4dd6bbfe80d93a23f2f7d140ed5dd764d13e96)
</content>
</entry>
<entry>
<title>security/p5-openxpki: Fix shebang related bugs</title>
<updated>2021-11-01T08:50:44Z</updated>
<author>
<name>Sergei Vyshenski</name>
<email>svysh.fbsd@gmail.com</email>
</author>
<published>2021-11-01T08:13:17Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/ports/commit/?id=5c86b88038aac08d8337e01247b867dece1e2268'/>
<id>urn:sha1:5c86b88038aac08d8337e01247b867dece1e2268</id>
<content type='text'>
* Update CONFLICTS
* Update pkg-message

PR:		259000
MFH:		2021Q4
(cherry picked from commit 7e96b5f51e6be90611ac7828980e61f31998e07b)
</content>
</entry>
<entry>
<title>security/tor: Update 0.4.6.7 -&gt; 0.4.6.8</title>
<updated>2021-10-29T19:42:32Z</updated>
<author>
<name>Yuri Victorovich</name>
<email>yuri@FreeBSD.org</email>
</author>
<published>2021-10-29T19:39:29Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/ports/commit/?id=26669118d268e1caf991e909a3d4e883072629cf'/>
<id>urn:sha1:26669118d268e1caf991e909a3d4e883072629cf</id>
<content type='text'>
Changelog: https://gitweb.torproject.org/tor.git/plain/ChangeLog?h=tor-0.4.6.8
(cherry picked from commit 0c3ad9597bc1a27a3e712b4efeb1aa5dc1af772f)
</content>
</entry>
<entry>
<title>security/tor-devel: Update 0.4.7.1-alpha -&gt; 0.4.7.2-alpha</title>
<updated>2021-10-29T19:42:31Z</updated>
<author>
<name>Neel Chauhan</name>
<email>nc@FreeBSD.org</email>
</author>
<published>2021-10-29T19:37:36Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/ports/commit/?id=fd6f8123f03955e88dc7e73e3c4e9973e59bbecd'/>
<id>urn:sha1:fd6f8123f03955e88dc7e73e3c4e9973e59bbecd</id>
<content type='text'>
Changelog: https://gitweb.torproject.org/tor.git/plain/ChangeLog?h=tor-0.4.7.2-alpha

PR:		259531
(cherry picked from commit a58a309a102b6d2994437149e4c198bae330c5e1)
</content>
</entry>
<entry>
<title>security/sssd: Fix installation with automake 1.16.4</title>
<updated>2021-10-27T19:26:27Z</updated>
<author>
<name>Tijl Coosemans</name>
<email>tijl@FreeBSD.org</email>
</author>
<published>2021-10-09T13:16:12Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/ports/commit/?id=78b01411ebc078d12fc4fa01db49d00f7e36a526'/>
<id>urn:sha1:78b01411ebc078d12fc4fa01db49d00f7e36a526</id>
<content type='text'>
Patch the configure script so it evaluates a variable that uses
PYTHON_PREFIX (since automake 1.16.4) before PYTHON_PREFIX is unset.

PR:		258898
Approved by:	maintainer timeout (2 weeks)

(cherry picked from commit b07a361a29711f26c51b24b433662baa37648194)
</content>
</entry>
<entry>
<title>security/py-fail2ban: Add upstream patch to fix possible RCE vulnerability</title>
<updated>2021-10-27T15:49:50Z</updated>
<author>
<name>Yasuhiro Kimura</name>
<email>yasu@FreeBSD.org</email>
</author>
<published>2021-10-20T09:42:38Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/ports/commit/?id=69221920c9faeff24c581ac1ee6d89ca4f1bbf11'/>
<id>urn:sha1:69221920c9faeff24c581ac1ee6d89ca4f1bbf11</id>
<content type='text'>
* Switch to DISTVERSION
* Pet portclippy
* Reformat Makefile with portfmt

PR:		259297
Approved by:	maintainer
Obtained from:	https://github.com/fail2ban/fail2ban/commit/410a6ce5c80dd981c22752da034f2529b5eee844
MFH:		2021Q4
Security:	CVE-2021-32749
Security:	https://github.com/fail2ban/fail2ban/security/advisories/GHSA-m985-3f3v-cwmm
Differential Revision:	https://reviews.freebsd.org/D32576

(cherry picked from commit 644e5b65b9503bed420885c9fefc8b3941dd009d)
</content>
</entry>
</feed>
