MFH: r509243 r509244

Update sysutils/webmin to version 1.930.

Contains fix for CVE-2019-15107.

From https://virtualmin.com/node/66890:

  To exploit the malicious code, your Webmin installation must have Webmin ->
  Webmin Configuration -> Authentication -> Password expiry policy set to
  Prompt users with expired passwords to enter a new one. This option is not
  set by default, but if it is set, it allows remote code execution.

PR:           239956
Submitted by: Bert JW Regeer <xistence@0x58.com>
Security:     CVE-2019-15107

Update sysutils/usermin to version 1.780.

PR:           239957

Approved by:  ports-secteam (joneum)
This commit is contained in:
Jimmy Olgeni 2019-08-20 10:46:00 +00:00
parent f2280a5b9b
commit b07a371d1d
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/branches/2019Q3/; revision=509417
6 changed files with 1064 additions and 817 deletions

View File

@ -1,7 +1,7 @@
# $FreeBSD$
PORTNAME= usermin
PORTVERSION= 1.750
PORTVERSION= 1.780
CATEGORIES= sysutils
MASTER_SITES= http://www.webmin.com/uupdates/:up \
SF/webadmin/${PORTNAME}/${PORTVERSION}:sf \

View File

@ -1,3 +1,3 @@
TIMESTAMP = 1549736295
SHA256 (usermin-1.750.tar.gz) = ed2fe3885b651e45dd8c8938a732d81793bcc32111e135088c7f5d72a921ebf9
SIZE (usermin-1.750.tar.gz) = 15798892
TIMESTAMP = 1566166759
SHA256 (usermin-1.780.tar.gz) = 6fc147e339106dbf3db5596b8712bf39a7e7181a15d329cad2b86e856fa7bc36
SIZE (usermin-1.780.tar.gz) = 17676345

File diff suppressed because it is too large Load Diff

View File

@ -2,8 +2,7 @@
# $FreeBSD$
PORTNAME= webmin
PORTVERSION= 1.900
PORTREVISION= 1
PORTVERSION= 1.930
CATEGORIES= sysutils
MASTER_SITES= http://download.webmin.com/updates/:up \
SF/webadmin/${PORTNAME}/${PORTVERSION}:sf

View File

@ -1,3 +1,3 @@
TIMESTAMP = 1543262271
SHA256 (webmin-1.900.tar.gz) = f2f252b116ec3a063440b4efe77fe89996d8d743aa6857db013ae6a34be7c62d
SIZE (webmin-1.900.tar.gz) = 29309930
TIMESTAMP = 1566166757
SHA256 (webmin-1.930.tar.gz) = f5789f180852d8bd3510b342cc968fba928ece6c940763a89dc0d8f059bde682
SIZE (webmin-1.930.tar.gz) = 30932910

File diff suppressed because it is too large Load Diff