From owner-svn-ports-branches@FreeBSD.ORG Thu Jul 17 09:49:24 2014 Return-Path: Delivered-To: svn-ports-branches@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B66DE2AB; Thu, 17 Jul 2014 09:49:24 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A2B5F2381; Thu, 17 Jul 2014 09:49:24 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.8/8.14.8) with ESMTP id s6H9nO3H072424; Thu, 17 Jul 2014 09:49:24 GMT (envelope-from rene@svn.freebsd.org) Received: (from rene@localhost) by svn.freebsd.org (8.14.8/8.14.8/Submit) id s6H9nOHs072423; Thu, 17 Jul 2014 09:49:24 GMT (envelope-from rene@svn.freebsd.org) Message-Id: <201407170949.s6H9nOHs072423@svn.freebsd.org> From: Rene Ladan Date: Thu, 17 Jul 2014 09:49:24 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org Subject: svn commit: r362127 - branches/2014Q3/www/chromium X-SVN-Group: ports-branches MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-branches@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: SVN commit messages for all the branches of the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jul 2014 09:49:24 -0000 Author: rene Date: Thu Jul 17 09:49:24 2014 New Revision: 362127 URL: http://svnweb.freebsd.org/changeset/ports/362127 QAT: https://qat.redports.org/buildarchive/r362127/ Log: MFH: r362124 Add CPE information. The vendor is "The Chromium Project" as shown on [1], Google is the vendor of the Google Chrome browser which is derived from the open source Chromium browser. [1] http://www.chromium.org/Home Approved by: portmgr (erwin) Modified: branches/2014Q3/www/chromium/Makefile Directory Properties: branches/2014Q3/ (props changed) Modified: branches/2014Q3/www/chromium/Makefile ============================================================================== --- branches/2014Q3/www/chromium/Makefile Thu Jul 17 08:57:51 2014 (r362126) +++ branches/2014Q3/www/chromium/Makefile Thu Jul 17 09:49:24 2014 (r362127) @@ -41,8 +41,9 @@ RUN_DEPENDS= ${LOCALBASE}/lib/alsa-lib/l ${LOCALBASE}/lib/X11/fonts/Droid/fonts.dir:${PORTSDIR}/x11-fonts/droid-fonts-ttf ONLY_FOR_ARCHS= i386 amd64 -USES= bison compiler:c++11-lib desktop-file-utils pkgconfig \ +USES= bison compiler:c++11-lib cpe desktop-file-utils pkgconfig \ perl5 shebangfix ninja tar:xz +CPE_VENDOR= The Chromium Project USE_PERL5= build USE_PYTHON_BUILD= 2 USE_XORG= scrnsaverproto x11 xproto xscrnsaver xtst From owner-svn-ports-branches@FreeBSD.ORG Thu Jul 17 09:50:37 2014 Return-Path: Delivered-To: svn-ports-branches@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 9439D392; Thu, 17 Jul 2014 09:50:37 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 66F01238A; Thu, 17 Jul 2014 09:50:37 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.8/8.14.8) with ESMTP id s6H9obrp074491; Thu, 17 Jul 2014 09:50:37 GMT (envelope-from rene@svn.freebsd.org) Received: (from rene@localhost) by svn.freebsd.org (8.14.8/8.14.8/Submit) id s6H9obOf074490; Thu, 17 Jul 2014 09:50:37 GMT (envelope-from rene@svn.freebsd.org) Message-Id: <201407170950.s6H9obOf074490@svn.freebsd.org> From: Rene Ladan Date: Thu, 17 Jul 2014 09:50:37 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org Subject: svn commit: r362128 - branches/2014Q3/security/vuxml X-SVN-Group: ports-branches MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-branches@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: SVN commit messages for all the branches of the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jul 2014 09:50:37 -0000 Author: rene Date: Thu Jul 17 09:50:36 2014 New Revision: 362128 URL: http://svnweb.freebsd.org/changeset/ports/362128 QAT: https://qat.redports.org/buildarchive/r362128/ Log: MFH: r362122 Document new vulnerabilities in www/chromium < 36.0.1985.125 Submitted by: Carlos Jacobo Puga Medina via freebsd-chromium Obtained from: http://googlechromereleases.blogspot.nl/ Approved by: portmgr (erwin) Modified: branches/2014Q3/security/vuxml/vuln.xml Directory Properties: branches/2014Q3/ (props changed) Modified: branches/2014Q3/security/vuxml/vuln.xml ============================================================================== --- branches/2014Q3/security/vuxml/vuln.xml Thu Jul 17 09:49:24 2014 (r362127) +++ branches/2014Q3/security/vuxml/vuln.xml Thu Jul 17 09:50:36 2014 (r362128) @@ -57,6 +57,39 @@ Notes: --> + + chromium -- multiple vulnerabilities + + + chromium + 36.0.1985.125 + + + + +

Google Chrome Releases reports:

+
+

26 security fixes in this release, including

+
    +
  • [380885] Medium CVE-2014-3160: Same-Origin-Policy bypass in SVG. Credit + to Christian Schneider.
    • +
  • [393765] CVE-2014-3162: Various fixes from internal audits, fuzzing and + other initiatives.
    • +
+
+ + + + CVE-2014-3160 + CVE-2014-3162 + http://googlechromereleases.blogspot.nl + + + 2014-07-16 + 2014-07-16 + + + kdelibs4 -- KMail/KIO POP3 SSL Man-in-the-middle Flaw From owner-svn-ports-branches@FreeBSD.ORG Fri Jul 18 08:07:19 2014 Return-Path: Delivered-To: svn-ports-branches@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B6F97E94; Fri, 18 Jul 2014 08:07:19 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A4E7626EA; Fri, 18 Jul 2014 08:07:19 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.8/8.14.8) with ESMTP id s6I87JYL014876; Fri, 18 Jul 2014 08:07:19 GMT (envelope-from matthew@svn.freebsd.org) Received: (from matthew@localhost) by svn.freebsd.org (8.14.8/8.14.8/Submit) id s6I87J8q014874; Fri, 18 Jul 2014 08:07:19 GMT (envelope-from matthew@svn.freebsd.org) Message-Id: <201407180807.s6I87J8q014874@svn.freebsd.org> From: Matthew Seaman Date: Fri, 18 Jul 2014 08:07:19 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org Subject: svn commit: r362187 - branches/2014Q3/databases/phpmyadmin X-SVN-Group: ports-branches MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-branches@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: SVN commit messages for all the branches of the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jul 2014 08:07:19 -0000 Author: matthew Date: Fri Jul 18 08:07:18 2014 New Revision: 362187 URL: http://svnweb.freebsd.org/changeset/ports/362187 QAT: https://qat.redports.org/buildarchive/r362187/ Log: MFH: r362181 Security update to 4.2.6. Security advisories will eventually be published at http://www.phpmyadmin.net/home_page/security/ Security: 3f09ca29-0e48-11e4-b17a-6805ca0b3d42 Approved by: portmgr Modified: branches/2014Q3/databases/phpmyadmin/Makefile branches/2014Q3/databases/phpmyadmin/distinfo Directory Properties: branches/2014Q3/ (props changed) Modified: branches/2014Q3/databases/phpmyadmin/Makefile ============================================================================== --- branches/2014Q3/databases/phpmyadmin/Makefile Fri Jul 18 08:02:55 2014 (r362186) +++ branches/2014Q3/databases/phpmyadmin/Makefile Fri Jul 18 08:07:18 2014 (r362187) @@ -2,7 +2,7 @@ # $FreeBSD$ PORTNAME= phpMyAdmin -DISTVERSION= 4.2.5 +DISTVERSION= 4.2.6 CATEGORIES= databases www MASTER_SITES= SF/${PORTNAME:tl}/${PORTNAME}/${DISTVERSION} DISTNAME= ${PORTNAME}-${DISTVERSION}-all-languages Modified: branches/2014Q3/databases/phpmyadmin/distinfo ============================================================================== --- branches/2014Q3/databases/phpmyadmin/distinfo Fri Jul 18 08:02:55 2014 (r362186) +++ branches/2014Q3/databases/phpmyadmin/distinfo Fri Jul 18 08:07:18 2014 (r362187) @@ -1,2 +1,2 @@ -SHA256 (phpMyAdmin-4.2.5-all-languages.tar.xz) = 1da068a70047d7b87a37e31f55241b1340150a6bc8451f08ecd1ed37242f2beb -SIZE (phpMyAdmin-4.2.5-all-languages.tar.xz) = 5200328 +SHA256 (phpMyAdmin-4.2.6-all-languages.tar.xz) = 6203e1fa7a1d7cb09a9f86d34f6dc5ea14df4ae5ebe51caa61666b8d3d57acef +SIZE (phpMyAdmin-4.2.6-all-languages.tar.xz) = 5134224 From owner-svn-ports-branches@FreeBSD.ORG Fri Jul 18 09:01:38 2014 Return-Path: Delivered-To: svn-ports-branches@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id F3F0A3A0; Fri, 18 Jul 2014 09:01:37 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C74922BDF; Fri, 18 Jul 2014 09:01:37 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.8/8.14.8) with ESMTP id s6I91bog042244; Fri, 18 Jul 2014 09:01:37 GMT (envelope-from madpilot@svn.freebsd.org) Received: (from madpilot@localhost) by svn.freebsd.org (8.14.8/8.14.8/Submit) id s6I91b5W042242; Fri, 18 Jul 2014 09:01:37 GMT (envelope-from madpilot@svn.freebsd.org) Message-Id: <201407180901.s6I91b5W042242@svn.freebsd.org> From: Guido Falsi Date: Fri, 18 Jul 2014 09:01:37 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org Subject: svn commit: r362195 - in branches/2014Q3/multimedia/libva: . files X-SVN-Group: ports-branches MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-branches@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: SVN commit messages for all the branches of the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jul 2014 09:01:38 -0000 Author: madpilot Date: Fri Jul 18 09:01:37 2014 New Revision: 362195 URL: http://svnweb.freebsd.org/changeset/ports/362195 QAT: https://qat.redports.org/buildarchive/r362195/ Log: MFH: r362158 - Import bugfix from upstream [1] - While here, remove check for unsupported release PR: 191921 [1] Submitted by: jiashiun@gmail.com Approved by: portmgr (miwi) Deleted: branches/2014Q3/multimedia/libva/files/extra-patch-va-va_trace.c Modified: branches/2014Q3/multimedia/libva/Makefile branches/2014Q3/multimedia/libva/files/patch-va-va.c Directory Properties: branches/2014Q3/ (props changed) Modified: branches/2014Q3/multimedia/libva/Makefile ============================================================================== --- branches/2014Q3/multimedia/libva/Makefile Fri Jul 18 08:45:37 2014 (r362194) +++ branches/2014Q3/multimedia/libva/Makefile Fri Jul 18 09:01:37 2014 (r362195) @@ -2,6 +2,7 @@ PORTNAME= libva PORTVERSION= 1.3.1 +PORTREVISION= 1 CATEGORIES= multimedia MASTER_SITES= http://cgit.freedesktop.org/${PORTNAME}/snapshot/ @@ -40,11 +41,6 @@ CFLAGS+= -DNDEBUG .include -# add strnlen(3) from head/lib/libc/string/strnlen.c -.if ${OSVERSION} < 800067 -EXTRA_PATCHES+= ${PATCHDIR}/extra-patch-va-va_trace.c -.endif - .if ${ARCH} == "sparc64" BROKEN= glXCreateContext fails during configure .endif Modified: branches/2014Q3/multimedia/libva/files/patch-va-va.c ============================================================================== --- branches/2014Q3/multimedia/libva/files/patch-va-va.c Fri Jul 18 08:45:37 2014 (r362194) +++ branches/2014Q3/multimedia/libva/files/patch-va-va.c Fri Jul 18 09:01:37 2014 (r362195) @@ -1,6 +1,6 @@ ---- va/va.c~ -+++ va/va.c -@@ -199,7 +199,7 @@ static VAStatus va_openDriver(VADisplay +--- ./va/va.c.orig 2014-05-09 12:38:02.000000000 +0800 ++++ ./va/va.c 2014-07-17 19:11:43.977174636 +0800 +@@ -227,7 +227,7 @@ strncat( driver_path, DRIVER_EXTENSION, strlen(DRIVER_EXTENSION) ); va_infoMessage("Trying to open %s\n", driver_path); @@ -9,3 +9,22 @@ handle = dlopen( driver_path, RTLD_NOW | RTLD_GLOBAL | RTLD_NODELETE ); #else handle = dlopen( driver_path, RTLD_NOW| RTLD_GLOBAL); +@@ -515,15 +515,15 @@ + free(old_ctx->vtable_vpp); + old_ctx->vtable_vpp = NULL; + +- if (VA_STATUS_SUCCESS == vaStatus) +- pDisplayContext->vaDestroy(pDisplayContext); +- + VA_TRACE_LOG(va_TraceTerminate, dpy); + + va_TraceEnd(dpy); + + va_FoolEnd(dpy); + ++ if (VA_STATUS_SUCCESS == vaStatus) ++ pDisplayContext->vaDestroy(pDisplayContext); ++ + return vaStatus; + } +