03:37 bjk 

Update to upstream security release 1.6.22

Also bring in rudimentary support for 11.1; 12.0 doesn't quite work
yet due to the ROOTINO-->UFS_ROOTINO rename.

Approved by:	eadler (ports committer)
MFH:		2017Q4
Security:	CVE-2017-17432

 

05:57 bjk 

Update net/openafs to upstream 1.6.20.1

This brings in support for 10.3, so remove that BROKEN.

Also bring in some Makefile logic to skip building the kernel module
on FreeBSD releases known to not be supported by upstream; the
server can still be built in those cases, allowing the 11.x BROKEN
to be removed as well.

Approved by:	brd (ports committer)

 

00:05 bjk 

Update net/openafs to upstream 1.6.18

This includes the changes in 1.6.17, a security release.

PR:		209534
Approved by:	mat (ports committer)
Security:	CVE-2016-2860

 

20:55 bjk 

Update net/openafs to 1.6.15, a security release

OPENAFS-SA-2015-007 (CVE-2015-7762, CVE-2015-7763): rx ACK packets
leak plaintext of previous packets.

Approved by:	feld (ports-secteam, ports committer)
Security:	OPENAFS-SA-2015-007, CVE-2015-7762, CVE-2015-7763

 

04:49 bjk 

Update to upstream openafs security release 1.6.13

OPENAFS-SA-2015-001 - vos leaks stack data onto the wire in the clear
when creating vldb entries

OPENAFS-SA-2015-002 - bos commands can be spoofed, including some
which alter server state

OPENAFS-SA-2015-003 - pioctls leak kernel memory contents

OPENAFS-SA-2015-004 - kernel pioctl support for OSD command passing can
trigger a panic

OPENAFS-SA-2015-006 - Buffer overflow in OpenAFS vlserver

Approved by:	delphij (ports committer)
MFH:		2015Q3
Security:	CVE-2015-3282, CVE-2015-3283, CVE-2015-3284, CVE-2015-3285

 

19:42 ak 

- Update to 1.6.10 [1]
  * Add support for FreeBSD 9.3 and 10.1
  * Remove a bug preventing the use of a disk cache on FreeBSD clients (as
opposed to a memory cache)
- Remove obsolete OSVERSION check
- Unmute install commands

PR:	194362 [1]
Submitted by:	Benjamin Kaduk <bjk@FreeBSD.org> (maintainer) [1]

 

08:40 hrs 

Update to 1.6.9.

Submitted by:	bjk (maintainer)

 

14:38 zi 

- Update to 1.6.7

Submitted by:	bjk@ (maintainer)
Security:	c0c31b27-bff3-11e3-9d09-000c2980a9f3

 

03:50 hrs 

- Update to 1.6.6.
- Fix build on 10 or later.
- Add STAGEDIR support.
- Use USES=kmod.
- Use *_USES, CONFIGURE_OFF instead of PORT_OPTIONS:MFUSE.
- Use ${CFLAGS} for XCFLAGS.
- Style cleanups.

Approved by:	bjk (maintainer)

 

18:29 bjk (doc committer) 

Update to 1.6.5

This is a security release by upstream, and requires configuration changes
in addition to the software update.  See UPDATING.

Reviewed by:	ports-security (zi, remko)
Approved by:	hrs (mentor, ports committer)

 

18:40 bjk (doc committer) 

Update to 1.6.4

Build fixes for 10-CURRENT will come in a separate commit.

Approved by:	hrs (mentor, ports committer)

 

18:29 crees 

Update to 1.6.2

* Fix buffer overflows in fileserver and ptserver.
* Fix rare file corruption during background sync (Gerrit 8796).
* Fix corrupting clients' metadata cache during certain errors (Gerrit 6957).
* Fix cache corruption when reading from a file another client is simultaneously
writing to (Gerrit 7994).
* Fix fileservers to properly report >2 TiB partitions.

and some other less serious changes.

PR:		ports/179259
Submitted by:	Adam Nowacki <nowak@tepeserwery.pl>
Submitted by:	bjk (maintainer)
Security:	CVE-2013-1794

 

02:45 hrs 

- Update to 1.6.1.
- Mark MAKE_JOBS_SAFE=yes.
- Use OPTIONSng.

Submitted by:   bjk (maintainer)

19:58 pawel 

Upgrade to the final OpenAFS 1.6.0 release

PR:             ports/160808
Submitted by:   Ben Kaduk <kaduk@mit.edu> (maintainer)
Approved by:    miwi, wen (mentors implicit)

17:46 crees 

Update database version, and ensure they're versioned in future.

PR:             ports/159829
Submitted by:   Ben Kaduk <kaduk@mit.edu> (maintainer)

21:49 zi 

Update to 1.6.0pre7
Redirect config output to /dev/null
Add LICENSE

PR:             ports/158961
Submitted by:   Ben Kaduk <kaduk@mit.edu> [maintainer]
Approved by:    wxs (mentor)

07:09 hrs 

Update to 1.6.0pre6.

Submitted by:   Benjamin Kaduk (maintainer)

00:09 wxs 

AFS is a distributed filesystem product, pioneered at Carnegie Mellon
University and supported and developed as a product by Transarc Corporation
(now IBM Pittsburgh Labs). It offers a client-server architecture for
federated file sharing and replicated read-only content distribution,
providing location independence, scalability, security, and transparent
migration capabilities. AFS is available for a broad range of heterogeneous
systems including UNIX, Linux, MacOS X, and Microsoft Windows.

IBM branched the source of the AFS product, and made a copy of the source
available for community development and maintenance. They called the
release OpenAFS.

WWW: http://www.openafs.org/

PR:             ports/152467
Submitted by:   Ben Kaduk <kaduk@mit.edu>