From owner-svn-ports-head@freebsd.org Wed Sep 27 18:06:07 2017 Return-Path: Delivered-To: svn-ports-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CC63FE0A4AB; Wed, 27 Sep 2017 18:06:07 +0000 (UTC) (envelope-from rakuco@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7563D80A6C; Wed, 27 Sep 2017 18:06:07 +0000 (UTC) (envelope-from rakuco@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id v8RI66if079157; Wed, 27 Sep 2017 18:06:06 GMT (envelope-from rakuco@FreeBSD.org) Received: (from rakuco@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id v8RI660A079153; Wed, 27 Sep 2017 18:06:06 GMT (envelope-from rakuco@FreeBSD.org) Message-Id: <201709271806.v8RI660A079153@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: rakuco set sender to rakuco@FreeBSD.org using -f From: Raphael Kubo da Costa Date: Wed, 27 Sep 2017 18:06:06 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r450774 - in head/archivers/libzip: . files X-SVN-Group: ports-head X-SVN-Commit-Author: rakuco X-SVN-Commit-Paths: in head/archivers/libzip: . files X-SVN-Commit-Revision: 450774 X-SVN-Commit-Repository: ports MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-head@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: SVN commit messages for the ports tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Sep 2017 18:06:07 -0000 Author: rakuco Date: Wed Sep 27 18:06:06 2017 New Revision: 450774 URL: https://svnweb.freebsd.org/changeset/ports/450774 Log: Update libzip to 1.3.0. It includes the fix for CVE-2017-14107 (landed separately in r450768) as well as a fix for CVE-2017-12858, which did not affect us due to the fact that the vulnerability was introduced in 1.2.0. libzip.so's SOVERSION got bumped after the removal of the undocumented function zip_archive_set_tempdir(). All ports depending on libzip continue to build fine after that. PR: 222638 Submitted by: Dani Deleted: head/archivers/libzip/files/patch-CVE-2017-14107 Modified: head/archivers/libzip/Makefile head/archivers/libzip/distinfo head/archivers/libzip/files/patch-lib__Makefile.in head/archivers/libzip/pkg-plist Modified: head/archivers/libzip/Makefile ============================================================================== --- head/archivers/libzip/Makefile Wed Sep 27 18:01:23 2017 (r450773) +++ head/archivers/libzip/Makefile Wed Sep 27 18:06:06 2017 (r450774) @@ -2,8 +2,7 @@ # $FreeBSD$ PORTNAME= libzip -PORTVERSION= 1.1.3 -PORTREVISION= 1 +PORTVERSION= 1.3.0 CATEGORIES= archivers devel MASTER_SITES= https://www.nih.at/libzip/ Modified: head/archivers/libzip/distinfo ============================================================================== --- head/archivers/libzip/distinfo Wed Sep 27 18:01:23 2017 (r450773) +++ head/archivers/libzip/distinfo Wed Sep 27 18:06:06 2017 (r450774) @@ -1,3 +1,3 @@ -TIMESTAMP = 1477213191 -SHA256 (libzip-1.1.3.tar.xz) = 729a295a59a9fd6e5b9fe9fd291d36ae391a9d2be0b0824510a214cfaa05ceee -SIZE (libzip-1.1.3.tar.xz) = 460128 +TIMESTAMP = 1506503583 +SHA256 (libzip-1.3.0.tar.xz) = aa936efe34911be7acac2ab07fb5c8efa53ed9bb4d44ad1fe8bff19630e0d373 +SIZE (libzip-1.3.0.tar.xz) = 955876 Modified: head/archivers/libzip/files/patch-lib__Makefile.in ============================================================================== --- head/archivers/libzip/files/patch-lib__Makefile.in Wed Sep 27 18:01:23 2017 (r450773) +++ head/archivers/libzip/files/patch-lib__Makefile.in Wed Sep 27 18:06:06 2017 (r450774) @@ -1,17 +1,17 @@ ---- lib/Makefile.in.orig 2016-02-19 14:21:44 UTC -+++ lib/Makefile.in -@@ -367,8 +367,8 @@ AM_CFLAGS = @CFLAG_VISIBILITY@ +--- lib/Makefile.in.orig 2017-09-02 18:10:43.000000000 +0200 ++++ lib/Makefile.in 2017-09-27 11:19:40.288590998 +0200 +@@ -496,8 +496,8 @@ AM_CFLAGS = @CFLAG_VISIBILITY@ libincludedir = ${libdir}/@PACKAGE@/include lib_LTLIBRARIES = libzip.la - noinst_HEADERS = zipint.h + noinst_HEADERS = zipint.h gladman-fcrypt.h -include_HEADERS = zip.h -nodist_libinclude_HEADERS = zipconf.h +include_HEADERS = zip.h zipconf.h +nodist_libinclude_HEADERS = # also update CMakeLists.txt when changing version - libzip_la_LDFLAGS = -no-undefined -version-info 4:0:0 -@@ -882,8 +882,7 @@ info: info-am + libzip_la_LDFLAGS = -no-undefined -version-info 5:0:0 +@@ -1926,8 +1926,7 @@ info: info-recursive info-am: @@ -19,5 +19,5 @@ - install-nodist_libincludeHEADERS +install-data-am: install-includeHEADERS - install-dvi: install-dvi-am + install-dvi: install-dvi-recursive Modified: head/archivers/libzip/pkg-plist ============================================================================== --- head/archivers/libzip/pkg-plist Wed Sep 27 18:01:23 2017 (r450773) +++ head/archivers/libzip/pkg-plist Wed Sep 27 18:06:06 2017 (r450774) @@ -5,8 +5,8 @@ include/zip.h include/zipconf.h lib/libzip.a lib/libzip.so -lib/libzip.so.4 -lib/libzip.so.4.0.0 +lib/libzip.so.5 +lib/libzip.so.5.0.0 libdata/pkgconfig/libzip.pc man/man1/zipcmp.1.gz man/man1/zipmerge.1.gz @@ -51,6 +51,7 @@ man/man3/zip_file_get_external_attributes.3.gz man/man3/zip_file_rename.3.gz man/man3/zip_file_replace.3.gz man/man3/zip_file_set_comment.3.gz +man/man3/zip_file_set_encryption.3.gz man/man3/zip_file_set_external_attributes.3.gz man/man3/zip_file_set_mtime.3.gz man/man3/zip_file_strerror.3.gz @@ -59,6 +60,8 @@ man/man3/zip_fopen_encrypted.3.gz man/man3/zip_fopen_index.3.gz man/man3/zip_fopen_index_encrypted.3.gz man/man3/zip_fread.3.gz +man/man3/zip_fseek.3.gz +man/man3/zip_ftell.3.gz man/man3/zip_get_archive_comment.3.gz man/man3/zip_get_archive_flag.3.gz man/man3/zip_get_error.3.gz @@ -69,6 +72,7 @@ man/man3/zip_get_num_files.3.gz man/man3/zip_name_locate.3.gz man/man3/zip_open.3.gz man/man3/zip_open_from_source.3.gz +man/man3/zip_register_progress_callback.3.gz man/man3/zip_rename.3.gz man/man3/zip_replace.3.gz man/man3/zip_set_archive_comment.3.gz