Hi,
Changelog is there:
https://github.com/collectd/collectd/releases/tag/collectd-5.7.2
As you would probably miss it otherwise because it's a bit hidden it
also says:
> Network plugin: A potential endless-loop has been fixed. This can be
> triggered remotely by sending a signed network packet to a server
> which is not set up to check signatures. Thanks to Marcin Kozlowski
> and @rpv-tomsk. #2174, #2233, CVE-2017-7401
I'm cooking a patch for -stable.
The 5-minutes-so-far testing has been fine. More tests welcome.
Comments? OK?
Cheers,
Daniel
Index: Makefile
===================================================================
RCS file: /cvs/ports/sysutils/collectd/Makefile,v
retrieving revision 1.47
diff -u -p -r1.47 Makefile
--- Makefile 30 Apr 2017 17:52:15 -0000 1.47
+++ Makefile 9 Jun 2017 01:44:24 -0000
@@ -11,7 +11,7 @@ COMMENT-memcachec = collectd memcachec p
COMMENT-nut = collectd nut plugin
COMMENT-riemann = collectd riemann plugin
-V = 5.7.1
+V = 5.7.2
DISTNAME = collectd-$V
PKGNAME-main = collectd-$V
PKGNAME-mysql = collectd-mysql-$V
@@ -63,7 +63,7 @@ RUN_DEPENDS-snmp = collectd-$V:${BASE_PK
LIB_DEPENDS-virt = sysutils/libvirt
WANTLIB-virt = avahi-client avahi-common c dbus-1 ffi gmp gnutls
hogweed \
nettle p11-kit ssh2 tasn1 util virt crypto curl iconv \
- idn2 intl lzma m nghttp2 pthread ssl xml2 z
+ idn2 intl lzma m nghttp2 pthread ssl unistring xml2 z
RUN_DEPENDS-virt = collectd-$V:${BASE_PKGPATH},-main
LIB_DEPENDS-python = ${MODPY_LIB_DEPENDS}
@@ -72,7 +72,7 @@ RUN_DEPENDS-python = collectd-$V:${BASE_
${MODPY_RUN_DEPENDS}
LIB_DEPENDS-memcachec = devel/libmemcached
-WANTLIB-memcachec = memcached sasl2 pthread
+WANTLIB-memcachec = m memcached sasl2 pthread
RUN_DEPENDS-memcachec = collectd-$V:${BASE_PKGPATH},-main
LIB_DEPENDS-nut = nut->=2.7.3p0:sysutils/nut
@@ -80,8 +80,9 @@ RUN_DEPENDS-nut = collectd-$V:${BASE_PKG
WANTLIB-nut = crypto pthread ssl upsclient
LIB_DEPENDS-riemann = sysutils/riemann-c-client
-WANTLIB-riemann = c gmp gnutls ffi hogweed intl iconv idn2 \
- nettle protobuf-c p11-kit pthread riemann-client tasn1 z
+WANTLIB-riemann = c gmp gnutls ffi hogweed intl iconv idn2 nettle \
+ protobuf-c p11-kit pthread riemann-client tasn1 \
+ unistring z
RUN_DEPENDS-riemann = collectd-$V:${BASE_PKGPATH},-main
LIB_DEPENDS += net/curl \
Index: distinfo
===================================================================
RCS file: /cvs/ports/sysutils/collectd/distinfo,v
retrieving revision 1.9
diff -u -p -r1.9 distinfo
--- distinfo 30 Apr 2017 17:52:15 -0000 1.9
+++ distinfo 9 Jun 2017 01:44:24 -0000
@@ -1,2 +1,2 @@
-SHA256 (collectd-5.7.1.tar.bz2) = ft02Q8CEIhVVOyQh1UVvTpqKWLB+IWtAp+jpECbY5QE=
-SIZE (collectd-5.7.1.tar.bz2) = 1797725
+SHA256 (collectd-5.7.2.tar.bz2) = nSCgIhVpqNa4C7xSuG5ehJZfW6/b9d/DeQ4P7Qdj5ZI=
+SIZE (collectd-5.7.2.tar.bz2) = 1798777
