From owner-svn-ports-head@freebsd.org Wed Nov 15 17:21:51 2017 Return-Path: Delivered-To: svn-ports-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0D6E3DE2780; Wed, 15 Nov 2017 17:21:51 +0000 (UTC) (envelope-from girgen@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D985372E68; Wed, 15 Nov 2017 17:21:50 +0000 (UTC) (envelope-from girgen@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id vAFHLn9V070158; Wed, 15 Nov 2017 17:21:49 GMT (envelope-from girgen@FreeBSD.org) Received: (from girgen@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id vAFHLn3V070152; Wed, 15 Nov 2017 17:21:49 GMT (envelope-from girgen@FreeBSD.org) Message-Id: <201711151721.vAFHLn3V070152@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: girgen set sender to girgen@FreeBSD.org using -f From: Palle Girgensohn Date: Wed, 15 Nov 2017 17:21:49 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r454256 - in head/security: opensaml2 shibboleth2-sp X-SVN-Group: ports-head X-SVN-Commit-Author: girgen X-SVN-Commit-Paths: in head/security: opensaml2 shibboleth2-sp X-SVN-Commit-Revision: 454256 X-SVN-Commit-Repository: ports MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-head@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: SVN commit messages for the ports tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Nov 2017 17:21:51 -0000 Author: girgen Date: Wed Nov 15 17:21:49 2017 New Revision: 454256 URL: https://svnweb.freebsd.org/changeset/ports/454256 Log: Shibboleth Service Provider Security Advisory [15 November 2017] An updated version of the Shibboleth Service Provider software is available which corrects a critical security issue in the "Dynamic" metadata provider plugin. Deployers making use of the affected feature should apply the relevant update at the soonest possible moment. Security: b4b7ec7d-ca27-11e7-a12d-6cc21735f730 Modified: head/security/opensaml2/Makefile head/security/opensaml2/distinfo head/security/opensaml2/pkg-plist head/security/shibboleth2-sp/Makefile head/security/shibboleth2-sp/distinfo head/security/shibboleth2-sp/pkg-plist Modified: head/security/opensaml2/Makefile ============================================================================== --- head/security/opensaml2/Makefile Wed Nov 15 17:17:37 2017 (r454255) +++ head/security/opensaml2/Makefile Wed Nov 15 17:21:49 2017 (r454256) @@ -2,8 +2,7 @@ # $FreeBSD$ PORTNAME= opensaml2 -PORTVERSION= 2.6.0 -PORTREVISION= 5 +PORTVERSION= 2.6.1 CATEGORIES= security MASTER_SITES= http://shibboleth.net/downloads/c++-opensaml/${PORTVERSION}/ DISTNAME= opensaml-${PORTVERSION} @@ -11,13 +10,14 @@ DISTNAME= opensaml-${PORTVERSION} MAINTAINER= girgen@FreeBSD.org COMMENT= Open source implementation of SAML2 +LICENSE= APACHE20 + +BUILD_DEPENDS= boost-libs>=0:devel/boost-libs LIB_DEPENDS= libcurl.so:ftp/curl \ liblog4shib.so:devel/log4shib \ libxml-security-c.so:security/apache-xml-security-c \ libxerces-c.so:textproc/xerces-c3 \ libxmltooling.so:devel/xmltooling - -BUILD_DEPENDS= boost-libs>=0:devel/boost-libs GNU_CONFIGURE= yes CONFIGURE_ARGS+=--with-log4shib=${LOCALBASE} --with-openssl=${OPENSSLBASE} \ Modified: head/security/opensaml2/distinfo ============================================================================== --- head/security/opensaml2/distinfo Wed Nov 15 17:17:37 2017 (r454255) +++ head/security/opensaml2/distinfo Wed Nov 15 17:21:49 2017 (r454256) @@ -1,3 +1,3 @@ -TIMESTAMP = 1473589706 -SHA256 (opensaml-2.6.0.tar.bz2) = 8bd2a7521dc372bcb92f8bc3fec301fb2ccecfad8bfb99052d6eb76b576250fd -SIZE (opensaml-2.6.0.tar.bz2) = 557977 +TIMESTAMP = 1510765173 +SHA256 (opensaml-2.6.1.tar.bz2) = 69516b165858d381fcf1d8ce809c101246824d383aa635a3676648c88b242a83 +SIZE (opensaml-2.6.1.tar.bz2) = 575533 Modified: head/security/opensaml2/pkg-plist ============================================================================== --- head/security/opensaml2/pkg-plist Wed Nov 15 17:17:37 2017 (r454255) +++ head/security/opensaml2/pkg-plist Wed Nov 15 17:21:49 2017 (r454256) @@ -49,7 +49,7 @@ include/saml/util/CommonDomainCookie.h include/saml/util/SAMLConstants.h lib/libsaml.so lib/libsaml.so.9 -lib/libsaml.so.9.0.0 +lib/libsaml.so.9.0.1 libdata/pkgconfig/opensaml.pc %%PORTDOCS%%%%DOCSDIR%%/README.txt %%PORTDOCS%%%%DOCSDIR%%/LICENSE.txt Modified: head/security/shibboleth2-sp/Makefile ============================================================================== --- head/security/shibboleth2-sp/Makefile Wed Nov 15 17:17:37 2017 (r454255) +++ head/security/shibboleth2-sp/Makefile Wed Nov 15 17:21:49 2017 (r454256) @@ -2,8 +2,7 @@ # $FreeBSD$ PORTNAME= shibboleth-sp -PORTVERSION= 2.6.0 -PORTREVISION= 6 +PORTVERSION= 2.6.1 CATEGORIES= security www MASTER_SITES= http://shibboleth.net/downloads/service-provider/${PORTVERSION}/ Modified: head/security/shibboleth2-sp/distinfo ============================================================================== --- head/security/shibboleth2-sp/distinfo Wed Nov 15 17:17:37 2017 (r454255) +++ head/security/shibboleth2-sp/distinfo Wed Nov 15 17:21:49 2017 (r454256) @@ -1,3 +1,3 @@ -TIMESTAMP = 1473589186 -SHA256 (shibboleth-sp-2.6.0.tar.bz2) = cb084f09c406257c7a8cb41464dc5d3e82803c3829e79288fc813e997f6f9b34 -SIZE (shibboleth-sp-2.6.0.tar.bz2) = 721245 +TIMESTAMP = 1510743416 +SHA256 (shibboleth-sp-2.6.1.tar.bz2) = 1121e3b726b844d829ad86f2047be62da4284ce965ac184de2f81903f16b98e4 +SIZE (shibboleth-sp-2.6.1.tar.bz2) = 758031 Modified: head/security/shibboleth2-sp/pkg-plist ============================================================================== --- head/security/shibboleth2-sp/pkg-plist Wed Nov 15 17:17:37 2017 (r454255) +++ head/security/shibboleth2-sp/pkg-plist Wed Nov 15 17:21:49 2017 (r454256) @@ -92,8 +92,9 @@ include/shibsp/util/PropertySet.h include/shibsp/util/SPConstants.h include/shibsp/util/TemplateParameters.h include/shibsp/version.h -lib/libshibsp.so.7 lib/libshibsp.so +lib/libshibsp.so.7 +lib/libshibsp.so.7.0.1 lib/shibboleth/adfs.so lib/shibboleth/adfs-lite.so %%MEMCACHED%%lib/shibboleth/memcache-store.so @@ -104,8 +105,9 @@ lib/shibboleth/plugins.so %%WITH_APACHE_24%%lib/shibboleth/mod_shib_24.so %%FASTCGI%%lib/shibboleth/shibauthorizer %%FASTCGI%%lib/shibboleth/shibresponder -lib/libshibsp-lite.so.7 lib/libshibsp-lite.so +lib/libshibsp-lite.so.7 +lib/libshibsp-lite.so.7.0.1 sbin/shibd share/xml/shibboleth/catalog.xml share/xml/shibboleth/shibboleth-2.0-afp-mf-basic.xsd