From nobody Sun Dec 15 11:36:30 2024 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YB1Hf5pxzz5ghrY; Sun, 15 Dec 2024 11:36:30 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R10" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4YB1Hf5JpRz4dGZ; Sun, 15 Dec 2024 11:36:30 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1734262590; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=FsoEduIxtkmyPV0jUCzf2B7rfqlossnhBjXlwSMRg0Q=; b=S+Z20IQqlGZVFbjBg8EKXSFv51cy16ukxkKQZgU0RuHEnafZnRoX4Pa8oXrlY7XkAC3koN wQ7GQO+k4+CbIZDS8Gpp6/S8SLKSaq/1XKNNYYg2vxV7GwwjCoNYtUcDNU3TBJwF/4ZDJB XZMGRn6z7mrodKODToi6Pqm5zh8OxR1Tu2lHM6nmjhzgvA6WFfXoVQm1XlmhdONxfQ2Ezb ys7gvcOgN62nuM7aQ6lue+JxrMGq8uu3sh9AdyYY+gPl6K8xkTjCdCMK1tHiYqvvZZwuwi KU+fN9d4Qqkjc62MnQmA7EXlq6r4Tlh+EmvWS3lw9Dhl2q+7xiZ+rFNgeSWppQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1734262590; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=FsoEduIxtkmyPV0jUCzf2B7rfqlossnhBjXlwSMRg0Q=; b=qYHgOzH2AySxGQox04l9PAWMduUdGUHCuvTsp69AUiVpXqDobV0hPm8ySvGEuKjtrz3yQS jbhbaWCkLFYvkNbyUurVfkOcSBP8feD8IO0vpKUgKTWZ5SFsjQ2p4xXMfUR7oH5UmvVtMu p7tfxXMGe/EEma7HgOfRdv0hCQPYjhkp7WIdjNial2TrMbqzvb4b3TOLGR7RfbyYl6vfL/ sCXhe1EGm04UhrMTnXs6nj9vkfVdf3Yt1NEB1FgQhvAFau4uAsV/4XIkSkKMV50CIOncql VYnyoir2av/clFSpcir9egifhQ7taaT4j5ZAT4qCThvNkzoO5M+k81EG77Itvw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1734262590; a=rsa-sha256; cv=none; b=BYvZDCNvKvyo0XF6NxcDm6Rob5Wyo+YoNa3zB8S/TetBwTXrSB7PTFHp1zpdbSeuGGCTDr Zc+S4Cb2rfaqwvvdWpFCUy5f8j/vyBAv/cFt3s7I08yBAVJr0629hAZgzjm8EsRaXSPpa7 M8N0jeK8iaeSH+AsVqtk+d/Mln1Di/itrpbEAkc5j3UjBS3oHElVrxk6DEdVOli4f53P94 lzIcT6mKFqDW1uYgd6DBQAo/qWZTcLIT4XcFJHNHbvZyOtVinycH24K8gH1AXElQg3IpFi iGo2qiODXZAtSKg1VaNPlGfrgZ542E55LAZjlIV7jeXbdVdu3xhKEvvt21uvyQ== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4YB1Hf4w9Mz15l9; Sun, 15 Dec 2024 11:36:30 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 4BFBaULF012432; Sun, 15 Dec 2024 11:36:30 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 4BFBaUxt012429; Sun, 15 Dec 2024 11:36:30 GMT (envelope-from git) Date: Sun, 15 Dec 2024 11:36:30 GMT Message-Id: <202412151136.4BFBaUxt012429@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Yuri Victorovich Subject: git: 4327d290f8f3 - main - textproc/halibut: update 1.2 =?utf-8?Q?=E2=86=92?= 1.3 List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-all@freebsd.org Sender: owner-dev-commits-ports-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: yuri X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 4327d290f8f3c3fc5323f8ed48cf1b2cac43aee3 Auto-Submitted: auto-generated The branch main has been updated by yuri: URL: https://cgit.FreeBSD.org/ports/commit/?id=4327d290f8f3c3fc5323f8ed48cf1b2cac43aee3 commit 4327d290f8f3c3fc5323f8ed48cf1b2cac43aee3 Author: Älven AuthorDate: 2024-12-15 11:34:17 +0000 Commit: Yuri Victorovich CommitDate: 2024-12-15 11:36:17 +0000 textproc/halibut: update 1.2 → 1.3 PR: 282213 --- security/vuxml/vuln/2024.xml | 42 +++++++++++++++++++++++++++++++ textproc/halibut/Makefile | 7 +++--- textproc/halibut/distinfo | 6 ++--- textproc/halibut/files/patch-Makefile | 13 ---------- textproc/halibut/files/patch-doc_Makefile | 17 ------------- 5 files changed, 49 insertions(+), 36 deletions(-) diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml index 6c648012e1d5..f6001c5084e0 100644 --- a/security/vuxml/vuln/2024.xml +++ b/security/vuxml/vuln/2024.xml @@ -2144,6 +2144,48 @@ + + halibut -- Segmentation fault, denial of service or possibly other unspecified impact via a crafted text document + + + halibut + 1.2 + + + + +

cve@mitre.org reports:

+
+

CVE-2021-42612: A use after free in cleanup_index in index.c in Halibut 1.2 allows + an attacker to cause a segmentation fault or possibly have other + unspecified impact via a crafted text document.

+
+
+

CVE-2021-42613: A double free in cleanup_index in index.c in Halibut 1.2 allows an + attacker to cause a denial of service or possibly have other + unspecified impact via a crafted text document.

+
+
+

CVE-2021-42614: A use after free in info_width_internal in bk_info.c in Halibut 1.2 + allows an attacker to cause a segmentation fault or possibly have + unspecified other impact via a crafted text document.

+
+ + + + CVE-2021-42612 + https://nvd.nist.gov/vuln/detail/CVE-2021-42612 + CVE-2021-42613 + https://nvd.nist.gov/vuln/detail/CVE-2021-42613 + CVE-2021-42614 + https://nvd.nist.gov/vuln/detail/CVE-2021-42614 + + + 2022-05-24 + 2024-10-26 + + + electron31 -- multiple vulnerabilities diff --git a/textproc/halibut/Makefile b/textproc/halibut/Makefile index 5e793558e15a..11f6f3f98cf4 100644 --- a/textproc/halibut/Makefile +++ b/textproc/halibut/Makefile @@ -1,6 +1,5 @@ PORTNAME= halibut -DISTVERSION= 1.2 -PORTREVISION= 1 +DISTVERSION= 1.3 CATEGORIES= textproc MASTER_SITES= https://www.chiark.greenend.org.uk/~sgtatham/halibut/halibut-${DISTVERSION}/ @@ -11,10 +10,12 @@ WWW= https://www.chiark.greenend.org.uk/~sgtatham/halibut/ LICENSE= MIT LICENSE_FILE= ${WRKSRC}/LICENCE -USES= gmake perl5 +USES= cmake cpe perl5 +CPE_VENDOR= halibut_project CFLAGS+= -fcommon # ld: error: duplicate symbol: all_fonts +INFO= halibut* PLIST_FILES= bin/halibut \ share/man/man1/halibut.1.gz diff --git a/textproc/halibut/distinfo b/textproc/halibut/distinfo index 19b21663cef2..193a9e928448 100644 --- a/textproc/halibut/distinfo +++ b/textproc/halibut/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1616800039 -SHA256 (halibut-1.2.tar.gz) = 1aedfb6240f27190c36a390fcac9ce732edbdbaa31c85ee675b994e2b083163f -SIZE (halibut-1.2.tar.gz) = 991975 +TIMESTAMP = 1729367343 +SHA256 (halibut-1.3.tar.gz) = aaa0f7696f17f74f42d97d0880aa088f5d68ed3079f3ed15d13b6e74909d3132 +SIZE (halibut-1.3.tar.gz) = 995916 diff --git a/textproc/halibut/files/patch-Makefile b/textproc/halibut/files/patch-Makefile deleted file mode 100644 index 03f8a043d0db..000000000000 --- a/textproc/halibut/files/patch-Makefile +++ /dev/null @@ -1,13 +0,0 @@ ---- Makefile.orig 2017-05-15 07:49:44 UTC -+++ Makefile -@@ -120,8 +120,8 @@ clean:: - - install: - mkdir -p $(prefix) $(bindir) -- $(INSTALL) -m 755 halibut $(bindir)/halibut -- $(MAKE) -C ../doc install prefix="$(prefix)" INSTALL="$(INSTALL)" -+ $(INSTALL) -m 755 halibut $(DESTDIR)$(bindir)/halibut -+ $(MAKE) -C ../doc install prefix="$(DESTDIR)$(prefix)" INSTALL="$(INSTALL)" - - FORCE: # phony target to force version.o to be rebuilt every time - diff --git a/textproc/halibut/files/patch-doc_Makefile b/textproc/halibut/files/patch-doc_Makefile deleted file mode 100644 index 8b2ac6b1c91a..000000000000 --- a/textproc/halibut/files/patch-doc_Makefile +++ /dev/null @@ -1,17 +0,0 @@ ---- doc/Makefile.orig 2017-05-15 07:49:44 UTC -+++ doc/Makefile -@@ -1,4 +1,4 @@ --mandir=$(prefix)/man -+mandir=$(prefix)/share/man - man1dir=$(mandir)/man1 - - CHAPTERS := $(SITE) blurb intro running input output licence manpage index -@@ -16,7 +16,7 @@ halibut.1: manpage.but - halibut.1: manpage.but - $(HALIBUT) --man=halibut.1 manpage.but - --install: -+install: halibut.1 - mkdir -p $(man1dir) - $(INSTALL) -m 644 halibut.1 $(man1dir)/halibut.1 -