[Bug 215587] www/h2i: patch CVE-2016-7835 & add security/vuxml entry

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=215587

            Bug ID: 215587
           Summary: www/h2i: patch CVE-2016-7835 & add security/vuxml
                    entry
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-secteam at FreeBSD.org
          Reporter: dch at skunkwerks.at
          Assignee: ports-secteam at FreeBSD.org
             Flags: maintainer-feedback?(ports-secteam at FreeBSD.org)

Created attachment 178297
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=178297&action=edit
v1 patch

# summary

patch www/h2o for publically announced CVE-2016-7835

- 2.0.5 has too many changes to go into a backported security fix
- include a custom https://github.com/h2o/h2o/commit/1b2b6d7.patch

https://h2o.examp1e.net/vulnerabilities.html

# QA

- portlint OK
- builds against 11_amd64 11_i386 10_amd64 10_i386 9_amd64 9_i386
- vuxml changes passes `make validate`

-- 
You are receiving this mail because:
You are the assignee for the bug.