search

TritonDataCenter / pkgsrc-legacy

Automatically updated conversion of the "pkgsrc" module from anoncvs.netbsd.org
http://www.pkgsrc.org
127 stars 64 forks source link

Backport icu from 2017Q4 for security fixes #556

Closed stevenwilliamson closed 6 years ago

stevenwilliamson commented 6 years ago

Fixes: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7867 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7868 https://nvd.nist.gov/vuln/detail/CVE-2017-14952 https://nvd.nist.gov/vuln/detail/CVE-2017-14952 https://nvd.nist.gov/vuln/detail/CVE-2017-17484 https://nvd.nist.gov/vuln/detail/CVE-2017-17484

mamash commented 6 years ago

I just merged this. Note that when a major lib version is updated (e.g. libicu went from 58 to 60), all packages that may end up depending on the need a PKGREVISION bump, so that existing binary packages out there (e.g. on VMs already deployed) are forced to update too and not end up with a broken runtime link. This is best done when merging though, because you end up touching hundreds of packages and it may get nasty when other commits are involved.