Vulnerable packages in ports tree 10/11

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Vulnerable packages in ports tree 10/11

Sevan / Venture37-2
Reply | Threaded
Open this post in threaded view
|

Re: Vulnerable packages in ports tree 10/11

Sevan / Venture37-2
Reply | Threaded
Open this post in threaded view
|

net/ntp update (was Re: Vulnerable packages in ports tree 10/11)

Daniel Jakots
In reply to this post by Sevan / Venture37-2
On Tue, 10 Nov 2015 01:30:12 +0000, Sevan / Venture37
<[hidden email]> wrote:

> net/ntp
> http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_Security_Vulner

Hi,

Here's an update quickly tested on -current and -stable (both amd64),
it works fine.

Cheers,
Daniel

Index: Makefile
===================================================================
RCS file: /cvs/ports/net/ntp/Makefile,v
retrieving revision 1.66
diff -u -p -r1.66 Makefile
--- Makefile 8 Oct 2015 21:19:22 -0000 1.66
+++ Makefile 10 Nov 2015 07:09:47 -0000
@@ -6,11 +6,10 @@ COMMENT= Network Time Protocol reference
 # to confuse with the ports system's 'pN' convention, so convert it to
 # 'pl' for local use.
 
-VERSION= 4.2.8p3
+VERSION= 4.2.8p4
 DISTNAME= ntp-${VERSION}
 PKGNAME= ntp-${VERSION:S/p/pl/}
 CATEGORIES= net
-REVISION= 0
 
 HOMEPAGE= http://www.ntp.org/
 
Index: distinfo
===================================================================
RCS file: /cvs/ports/net/ntp/distinfo,v
retrieving revision 1.18
diff -u -p -r1.18 distinfo
--- distinfo 1 Jul 2015 10:35:29 -0000 1.18
+++ distinfo 10 Nov 2015 07:09:47 -0000
@@ -1,2 +1,2 @@
-SHA256 (ntp-4.2.8p3.tar.gz) = gYyk8u1sqEWxxexD9eatkF6qD8CqstUJ7WuWKjf7848=
-SIZE (ntp-4.2.8p3.tar.gz) = 7099575
+SHA256 (ntp-4.2.8p4.tar.gz) = DWlhVyVI0sSvlvWPdj4irGIPWv73FzhN3DF6DjZc/bk=
+SIZE (ntp-4.2.8p4.tar.gz) = 7104852

Reply | Threaded
Open this post in threaded view
|

Re: net/ntp update (was Re: Vulnerable packages in ports tree 10/11)

Jeremie Courreges-Anglas-2
Daniel Jakots <[hidden email]> writes:

> On Tue, 10 Nov 2015 01:30:12 +0000, Sevan / Venture37
> <[hidden email]> wrote:
>
>> net/ntp
>> http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_Security_Vulner
>
> Hi,
>
> Here's an update quickly tested on -current and -stable (both amd64),
> it works fine.

Committed, thanks a lot.  Any objection to the following patch for the
5.8 branch?

Index: Makefile
===================================================================
RCS file: /cvs/ports/net/ntp/Makefile,v
retrieving revision 1.65
diff -u -p -r1.65 Makefile
--- Makefile 1 Jul 2015 11:59:24 -0000 1.65
+++ Makefile 10 Nov 2015 18:42:20 -0000
@@ -6,7 +6,7 @@ COMMENT= Network Time Protocol reference
 # to confuse with the ports system's 'pN' convention, so convert it to
 # 'pl' for local use.
 
-VERSION= 4.2.8p3
+VERSION= 4.2.8p4
 DISTNAME= ntp-${VERSION}
 PKGNAME= ntp-${VERSION:S/p/pl/}
 CATEGORIES= net
Index: distinfo
===================================================================
RCS file: /cvs/ports/net/ntp/distinfo,v
retrieving revision 1.18
diff -u -p -r1.18 distinfo
--- distinfo 1 Jul 2015 10:35:29 -0000 1.18
+++ distinfo 10 Nov 2015 18:42:20 -0000
@@ -1,2 +1,2 @@
-SHA256 (ntp-4.2.8p3.tar.gz) = gYyk8u1sqEWxxexD9eatkF6qD8CqstUJ7WuWKjf7848=
-SIZE (ntp-4.2.8p3.tar.gz) = 7099575
+SHA256 (ntp-4.2.8p4.tar.gz) = DWlhVyVI0sSvlvWPdj4irGIPWv73FzhN3DF6DjZc/bk=
+SIZE (ntp-4.2.8p4.tar.gz) = 7104852

--
jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF  DDCC 0DFA 74AE 1524 E7EE