Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 15 Nov 2017 17:21:49 +0000 (UTC)
From:      Palle Girgensohn <girgen@FreeBSD.org>
To:        ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org
Subject:   svn commit: r454256 - in head/security: opensaml2 shibboleth2-sp
Message-ID:  <201711151721.vAFHLn3V070152@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: girgen
Date: Wed Nov 15 17:21:49 2017
New Revision: 454256
URL: https://svnweb.freebsd.org/changeset/ports/454256

Log:
  Shibboleth Service Provider Security Advisory [15 November 2017]
  
  An updated version of the Shibboleth Service Provider software
  is available which corrects a critical security issue in the
  "Dynamic" metadata provider plugin.
  
  Deployers making use of the affected feature should apply the
  relevant update at the soonest possible moment.
  
  Security:	b4b7ec7d-ca27-11e7-a12d-6cc21735f730

Modified:
  head/security/opensaml2/Makefile
  head/security/opensaml2/distinfo
  head/security/opensaml2/pkg-plist
  head/security/shibboleth2-sp/Makefile
  head/security/shibboleth2-sp/distinfo
  head/security/shibboleth2-sp/pkg-plist

Modified: head/security/opensaml2/Makefile
==============================================================================
--- head/security/opensaml2/Makefile	Wed Nov 15 17:17:37 2017	(r454255)
+++ head/security/opensaml2/Makefile	Wed Nov 15 17:21:49 2017	(r454256)
@@ -2,8 +2,7 @@
 # $FreeBSD$
 
 PORTNAME=	opensaml2
-PORTVERSION=	2.6.0
-PORTREVISION=	5
+PORTVERSION=	2.6.1
 CATEGORIES=	security
 MASTER_SITES=	http://shibboleth.net/downloads/c++-opensaml/${PORTVERSION}/
 DISTNAME=	opensaml-${PORTVERSION}
@@ -11,13 +10,14 @@ DISTNAME=	opensaml-${PORTVERSION}
 MAINTAINER=	girgen@FreeBSD.org
 COMMENT=	Open source implementation of SAML2
 
+LICENSE=	APACHE20
+
+BUILD_DEPENDS=	boost-libs>=0:devel/boost-libs
 LIB_DEPENDS=	libcurl.so:ftp/curl \
 		liblog4shib.so:devel/log4shib \
 		libxml-security-c.so:security/apache-xml-security-c \
 		libxerces-c.so:textproc/xerces-c3 \
 		libxmltooling.so:devel/xmltooling
-
-BUILD_DEPENDS=	boost-libs>=0:devel/boost-libs
 
 GNU_CONFIGURE=	yes
 CONFIGURE_ARGS+=--with-log4shib=${LOCALBASE} --with-openssl=${OPENSSLBASE} \

Modified: head/security/opensaml2/distinfo
==============================================================================
--- head/security/opensaml2/distinfo	Wed Nov 15 17:17:37 2017	(r454255)
+++ head/security/opensaml2/distinfo	Wed Nov 15 17:21:49 2017	(r454256)
@@ -1,3 +1,3 @@
-TIMESTAMP = 1473589706
-SHA256 (opensaml-2.6.0.tar.bz2) = 8bd2a7521dc372bcb92f8bc3fec301fb2ccecfad8bfb99052d6eb76b576250fd
-SIZE (opensaml-2.6.0.tar.bz2) = 557977
+TIMESTAMP = 1510765173
+SHA256 (opensaml-2.6.1.tar.bz2) = 69516b165858d381fcf1d8ce809c101246824d383aa635a3676648c88b242a83
+SIZE (opensaml-2.6.1.tar.bz2) = 575533

Modified: head/security/opensaml2/pkg-plist
==============================================================================
--- head/security/opensaml2/pkg-plist	Wed Nov 15 17:17:37 2017	(r454255)
+++ head/security/opensaml2/pkg-plist	Wed Nov 15 17:21:49 2017	(r454256)
@@ -49,7 +49,7 @@ include/saml/util/CommonDomainCookie.h
 include/saml/util/SAMLConstants.h
 lib/libsaml.so
 lib/libsaml.so.9
-lib/libsaml.so.9.0.0
+lib/libsaml.so.9.0.1
 libdata/pkgconfig/opensaml.pc
 %%PORTDOCS%%%%DOCSDIR%%/README.txt
 %%PORTDOCS%%%%DOCSDIR%%/LICENSE.txt

Modified: head/security/shibboleth2-sp/Makefile
==============================================================================
--- head/security/shibboleth2-sp/Makefile	Wed Nov 15 17:17:37 2017	(r454255)
+++ head/security/shibboleth2-sp/Makefile	Wed Nov 15 17:21:49 2017	(r454256)
@@ -2,8 +2,7 @@
 # $FreeBSD$
 
 PORTNAME=	shibboleth-sp
-PORTVERSION=	2.6.0
-PORTREVISION=	6
+PORTVERSION=	2.6.1
 CATEGORIES=	security www
 MASTER_SITES=	http://shibboleth.net/downloads/service-provider/${PORTVERSION}/
 

Modified: head/security/shibboleth2-sp/distinfo
==============================================================================
--- head/security/shibboleth2-sp/distinfo	Wed Nov 15 17:17:37 2017	(r454255)
+++ head/security/shibboleth2-sp/distinfo	Wed Nov 15 17:21:49 2017	(r454256)
@@ -1,3 +1,3 @@
-TIMESTAMP = 1473589186
-SHA256 (shibboleth-sp-2.6.0.tar.bz2) = cb084f09c406257c7a8cb41464dc5d3e82803c3829e79288fc813e997f6f9b34
-SIZE (shibboleth-sp-2.6.0.tar.bz2) = 721245
+TIMESTAMP = 1510743416
+SHA256 (shibboleth-sp-2.6.1.tar.bz2) = 1121e3b726b844d829ad86f2047be62da4284ce965ac184de2f81903f16b98e4
+SIZE (shibboleth-sp-2.6.1.tar.bz2) = 758031

Modified: head/security/shibboleth2-sp/pkg-plist
==============================================================================
--- head/security/shibboleth2-sp/pkg-plist	Wed Nov 15 17:17:37 2017	(r454255)
+++ head/security/shibboleth2-sp/pkg-plist	Wed Nov 15 17:21:49 2017	(r454256)
@@ -92,8 +92,9 @@ include/shibsp/util/PropertySet.h
 include/shibsp/util/SPConstants.h
 include/shibsp/util/TemplateParameters.h
 include/shibsp/version.h
-lib/libshibsp.so.7
 lib/libshibsp.so
+lib/libshibsp.so.7
+lib/libshibsp.so.7.0.1
 lib/shibboleth/adfs.so
 lib/shibboleth/adfs-lite.so
 %%MEMCACHED%%lib/shibboleth/memcache-store.so
@@ -104,8 +105,9 @@ lib/shibboleth/plugins.so
 %%WITH_APACHE_24%%lib/shibboleth/mod_shib_24.so
 %%FASTCGI%%lib/shibboleth/shibauthorizer
 %%FASTCGI%%lib/shibboleth/shibresponder
-lib/libshibsp-lite.so.7
 lib/libshibsp-lite.so
+lib/libshibsp-lite.so.7
+lib/libshibsp-lite.so.7.0.1
 sbin/shibd
 share/xml/shibboleth/catalog.xml
 share/xml/shibboleth/shibboleth-2.0-afp-mf-basic.xsd



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201711151721.vAFHLn3V070152>