Updated www/ap2-auth-mellon to 0.14.2

Changes sine 0.14.0 include:
- Fix CVE-2019-3878 Authentication bypass when Apache is used as reverse proxy
- Fix CVE-2019-3877 Redirect URL validation bypass
- Fix environment variables in MellonCond
- Fix detection of AJAX requests
- Fix trailing semi-colon in Set-Cookie header
This commit is contained in:
manu 2019-03-23 02:37:41 +00:00
parent 9f0706bef2
commit 48bc99c051
3 changed files with 10 additions and 9 deletions

View file

@ -1,4 +1,4 @@
$NetBSD: CHANGES-2019,v 1.1445 2019/03/23 00:21:23 ryoon Exp $
$NetBSD: CHANGES-2019,v 1.1446 2019/03/23 02:37:41 manu Exp $
Changes to the packages collection and infrastructure in 2019:
@ -2331,3 +2331,4 @@ Changes to the packages collection and infrastructure in 2019:
Updated editors/OmegaT to 4.1.5.04 [ryoon 2019-03-22]
Updated geography/qgis to 2.18.28 [ryoon 2019-03-22]
Updated math/fricas to 1.3.5 [ryoon 2019-03-23]
Updated www/ap2-auth-mellon to 0.14.2 [manu 2019-03-23]

View file

@ -1,8 +1,8 @@
# $NetBSD: Makefile,v 1.47 2018/12/13 19:52:25 adam Exp $
# $NetBSD: Makefile,v 1.48 2019/03/23 02:37:42 manu Exp $
DISTNAME= mod_auth_mellon-0.14.0
DISTNAME= mod_auth_mellon-0.14.2
PKGNAME= ${APACHE_PKG_PREFIX}-${DISTNAME:S/mod_//:S/_/-/g}
PKGREVISION= 2
#PKGREVISION= 1
CATEGORIES= www security
MASTER_SITES= ${MASTER_SITE_GITHUB:=UNINETT/}/mod_auth_mellon/releases/download/v${DISTNAME:C/.*-//}/

View file

@ -1,6 +1,6 @@
$NetBSD: distinfo,v 1.19 2018/05/04 02:53:38 manu Exp $
$NetBSD: distinfo,v 1.20 2019/03/23 02:37:42 manu Exp $
SHA1 (mod_auth_mellon-0.14.0.tar.gz) = 4a93f8b093e1dea20e8a286931693c614903f2d9
RMD160 (mod_auth_mellon-0.14.0.tar.gz) = 71a25b4fb1e9a6183a51225b588b10d330d84903
SHA512 (mod_auth_mellon-0.14.0.tar.gz) = db1bf70c234fe89914b1bb34fc6afb5b901193a8c8c7e9946485a3e20a7d129c36427717eab53764edf5a5cff5c45dfe412e400cb1f50c49ef24dbbfd6ecbf25
Size (mod_auth_mellon-0.14.0.tar.gz) = 948785 bytes
SHA1 (mod_auth_mellon-0.14.2.tar.gz) = 35d4359487fb97e9982b501ef3581b49bf985888
RMD160 (mod_auth_mellon-0.14.2.tar.gz) = 412ecf6e1a616ca7c1caa6470976d1f66c8c76e6
SHA512 (mod_auth_mellon-0.14.2.tar.gz) = 9d14b1482a73ce7e86f5f7618454aab8759533649f34fa0088264b7b09dbd90db46011c629303b2f3ad969379937ff5adaa0d7b63a502cdfbba0cd1b762502a6
Size (mod_auth_mellon-0.14.2.tar.gz) = 950737 bytes