From dm@home8.dinoex.sub.de  Fri Apr  5 14:19:15 2013
Return-Path: <dm@home8.dinoex.sub.de>
Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115])
	by hub.freebsd.org (Postfix) with ESMTP id E3692436
	for <FreeBSD-gnats-submit@freebsd.org>; Fri,  5 Apr 2013 14:19:14 +0000 (UTC)
	(envelope-from dm@home8.dinoex.sub.de)
Received: from uucp.dinoex.sub.de (smtp3.dinoex.sub.de [IPv6:2001:1440:5001:1::2])
	by mx1.freebsd.org (Postfix) with ESMTP id 25FCB91B
	for <FreeBSD-gnats-submit@freebsd.org>; Fri,  5 Apr 2013 14:19:13 +0000 (UTC)
Received: from home8.dinoex.sub.de (home8.dinoex.sub.de [194.45.71.48])
	by uucp.dinoex.sub.de (8.14.5/8.14.4) with ESMTP id r35EIjvL092365
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 5 Apr 2013 16:19:01 +0200 (CEST)
	(envelope-from dm@home8.dinoex.sub.de)
Received: (from dm@localhost)
	by home8.dinoex.sub.de (8.14.5/8.14.5/Submit) id r35EIiHT010997;
	Fri, 5 Apr 2013 16:18:44 +0200 (CEST)
	(envelope-from dm)
Message-Id: <201304051418.r35EIiHT010997@home8.dinoex.sub.de>
Date: Fri, 5 Apr 2013 16:18:44 +0200 (CEST)
From: dirk.meyer@dinoex.sub.org
Reply-To: dirk.meyer@dinoex.sub.org
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: Security Update: www/opera
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         177654
>Category:       ports
>Synopsis:       Security Update: www/opera
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    dinoex
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          maintainer-update
>Submitter-Id:   current-users
>Arrival-Date:   Fri Apr 05 14:20:00 UTC 2013
>Closed-Date:    Sat Apr 06 23:16:39 UTC 2013
>Last-Modified:  Sat Apr 06 23:16:39 UTC 2013
>Originator:     Dirk Meyer
>Release:        FreeBSD 9.1-RELEASE
>Organization:
privat
>Environment:

>Description:

	Opera has relased a Security update

Fixed a moderately severe issue, as reported by Attila Suszter; details will be disclosed at a later date.

http://www.opera.com/security/advisory/1046
http://www.opera.com/security/advisory/1047

>How-To-Repeat:

>Fix:

	The Patch solves the prtoblems.
	Build with pkg_jail

	Package tested on 8.3 i386 and amd64
	Flashplugin may work only after reboot.

Index: opera/distinfo
===================================================================
--- opera/distinfo	(revision 315729)
+++ opera/distinfo	(working copy)
@@ -1,4 +1,4 @@
-SHA256 (opera-12.14-1738.amd64.freebsd.tar.xz) = 3fe8e7736482fc74104363c521a491f5c0648c7c4c569a7d57e220e651124697
-SIZE (opera-12.14-1738.amd64.freebsd.tar.xz) = 13443168
-SHA256 (opera-12.14-1738.i386.freebsd.tar.xz) = 8c706c578ed6151a22ba30a1311e8aa51cd789851f962eab76df9d7c22db9d5a
-SIZE (opera-12.14-1738.i386.freebsd.tar.xz) = 13488412
+SHA256 (opera-12.15-1748.amd64.freebsd.tar.xz) = 1101c0a8882d6bbc5c892c170eeab4062b63a5d4e21c2928eca378bf9283e20d
+SIZE (opera-12.15-1748.amd64.freebsd.tar.xz) = 13443688
+SHA256 (opera-12.15-1748.i386.freebsd.tar.xz) = 654db056fb1d8f3490beaa4e0f6da27e46cd9903c5d34105b279a8e1ad2c2ad2
+SIZE (opera-12.15-1748.i386.freebsd.tar.xz) = 13487204
Index: opera/pkg-plist
===================================================================
--- opera/pkg-plist	(revision 315729)
+++ opera/pkg-plist	(working copy)
@@ -216,6 +216,9 @@
 %%DATADIR%%/region/in/standard_speeddial.ini
 %%DATADIR%%/region/ke/bookmarks.adr
 %%DATADIR%%/region/ke/standard_speeddial.ini
+%%DATADIR%%/region/kz/bookmarks.adr
+%%DATADIR%%/region/kz/search.ini
+%%DATADIR%%/region/kz/standard_speeddial.ini
 %%DATADIR%%/region/latin_america/bookmarks.adr
 %%DATADIR%%/region/latin_america/search.ini
 %%DATADIR%%/region/latin_america/standard_speeddial.ini
@@ -359,6 +362,7 @@
 @dirrm %%DATADIR%%/region/mx
 @dirrm %%DATADIR%%/region/middle_east
 @dirrm %%DATADIR%%/region/latin_america
+@dirrm %%DATADIR%%/region/kz
 @dirrm %%DATADIR%%/region/ke
 @dirrm %%DATADIR%%/region/in
 @dirrm %%DATADIR%%/region/id
Index: opera/Makefile
===================================================================
--- opera/Makefile	(revision 315729)
+++ opera/Makefile	(working copy)
@@ -21,10 +21,8 @@
 BUILD_DEPENDS=	${LOCALBASE}/bin/update-mime-database:${PORTSDIR}/misc/shared-mime-info
 RUN_DEPENDS=	${LOCALBASE}/bin/update-mime-database:${PORTSDIR}/misc/shared-mime-info
 
-FORBIDDEN=	contains a "moderately severe issue" with unknown impact
-
-OPERA_VER?=	12.14
-OPERA_BUILD?=	1738
+OPERA_VER?=	12.15
+OPERA_BUILD?=	1748
 MASTER_SITES_VER_PATH=	unix/${OPERA_VER:S/.//}
 
 USE_XZ=		yes
Index: opera-linuxplugins/distinfo
===================================================================
--- opera-linuxplugins/distinfo	(revision 315726)
+++ opera-linuxplugins/distinfo	(working copy)
@@ -1,2 +1,2 @@
-SHA256 (opera-12.14-1738.i386.linux.tar.xz) = 00721be8475bd967ff0017d3db6c57d9d03b329bdcab2fba44231afccb0b9bd9
-SIZE (opera-12.14-1738.i386.linux.tar.xz) = 13590832
+SHA256 (opera-12.15-1748.i386.linux.tar.xz) = 602eff2177b42d809c44c832cb961eb5cfad1d502d20af31f082a703bee2eae2
+SIZE (opera-12.15-1748.i386.linux.tar.xz) = 13576396
Index: opera-linuxplugins/Makefile
===================================================================
--- opera-linuxplugins/Makefile	(revision 315726)
+++ opera-linuxplugins/Makefile	(working copy)
@@ -20,8 +20,8 @@
 
 RUN_DEPENDS=	${LOCALBASE}/lib/opera/pluginwrapper/operapluginwrapper:${PORTSDIR}/${PKGCATEGORY}/opera
 
-OPERA_VER?=	12.14
-OPERA_BUILD?=	1738
+OPERA_VER?=	12.15
+OPERA_BUILD?=	1748
 MASTER_SITES_VER_PATH=	linux/${OPERA_VER:S/.//}/
 
 USE_XZ=		yes
>Release-Note:
>Audit-Trail:
Class-Changed-From-To: maintainer-update->change-request 
Class-Changed-By: edwin 
Class-Changed-When: Fri Apr 5 14:20:09 UTC 2013 
Class-Changed-Why:  
Fix category (submitter is not maintainer) (via the GNATS Auto Assign 
Tool) 

http://www.freebsd.org/cgi/query-pr.cgi?pr=177654 
Responsible-Changed-From-To: freebsd-ports-bugs->dinoex 
Responsible-Changed-By: edwin 
Responsible-Changed-When: Fri Apr 5 14:20:11 UTC 2013 
Responsible-Changed-Why:  
Over to maintainer (via the GNATS Auto Assign Tool) 

http://www.freebsd.org/cgi/query-pr.cgi?pr=177654 
Responsible-Changed-From-To: dinoex->portmgr 
Responsible-Changed-By: dinoex 
Responsible-Changed-When: Fri Apr 5 16:24:49 CEST 2013 
Responsible-Changed-Why:  

waiting for approval 


http://www.freebsd.org/cgi/query-pr.cgi?pr=177654 
State-Changed-From-To: open->feedback 
State-Changed-By: bapt 
State-Changed-When: Fri Apr 5 14:39:58 UTC 2013 
State-Changed-Why:  
We need 2 more things to approve: a build log and a vuxml entry 

http://www.freebsd.org/cgi/query-pr.cgi?pr=177654 

From: dirk.meyer@dinoex.sub.org (Dirk Meyer)
To: FreeBSD-gnats-submit@FreeBSD.org
Cc:  
Subject: Re: ports/177654: Security Update: www/opera
Date: Fri, 05 Apr 2013 19:35:46 +0200

 build logs are now online:
 
 http://people.freebsd.org/~dinoex/logs/i386-build%2ccurrent%2copera.log
 http://people.freebsd.org/~dinoex/logs/i386-build%2ccurrent%2copera-linuxplugins.log
 http://people.freebsd.org/~dinoex/logs/amd64-build%2ccurrent%2copera.log
 http://people.freebsd.org/~dinoex/logs/amd64-build%2ccurrent%2copera-linuxplugins.log
 
 kind regards Dirk
 
 - Dirk Meyer, Im Grund 4, 34317 Habichtswald, Germany
 - [dirk.meyer@dinoex.sub.org],[dirk.meyer@guug.de],[dinoex@FreeBSD.org]

From: dirk.meyer@dinoex.sub.org (Dirk Meyer)
To: FreeBSD-gnats-submit@FreeBSD.org
Cc:  
Subject: Re: ports/177654: Security Update: www/opera
Date: Sat, 06 Apr 2013 06:17:57 +0200

 Here the VUXML enrtry.
 
 Index: vuln.xml
 ===================================================================
 --- vuln.xml	(revision 315738)
 +++ vuln.xml	(working copy)
 @@ -51,6 +51,36 @@
  
  -->
  <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
 +  <vuln vid="cebed39d-9e6f-11e2-b3f5-003067c2616f">
 +    <topic>opera -- moderately severe issue</topic>
 +    <affects>
 +      <package>
 +	<name>opera</name>
 +	<name>opera-devel</name>
 +	<name>linux-opera</name>
 +	<name>linux-opera-devel</name>
 +	<range><lt>12.15</lt></range>
 +      </package>
 +    </affects>
 +    <description>
 +      <body xmlns="http://www.w3.org/1999/xhtml">
 +	<p>Opera reports:</p>
 +	<blockquote cite="http://www.opera.com/support/kb/view/1042/">
 +	  <p>Fixed a moderately severe issue, as reported by Attila Suszte.</p>
 +	</blockquote>
 +      </body>
 +    </description>
 +    <references>
 +      <url>http://www.opera.com/docs/changelogs/unified/1215/</url>
 +      <url>http://www.opera.com/support/kb/view/1046/</url>
 +      <url>http://www.opera.com/support/kb/view/1047/</url>
 +    </references>
 +    <dates>
 +      <discovery>2013-04-04</discovery>
 +      <entry>2013-04-06</entry>
 +    </dates>
 +  </vuln>
 +
    <vuln vid="eae8e3cf-9dfe-11e2-ac7f-001fd056c417">
      <topic>otrs -- Information disclosure and Data manipulation</topic>
      <affects>
Class-Changed-From-To: change-request->maintainer-update 
Class-Changed-By: dinoex 
Class-Changed-When: Sat Apr 6 06:41:29 CEST 2013 
Class-Changed-Why:  
I am the submitter and maintainer 

http://www.freebsd.org/cgi/query-pr.cgi?pr=177654 
State-Changed-From-To: feedback->open 
State-Changed-By: dinoex 
State-Changed-When: Sat Apr 6 15:28:37 CEST 2013 
State-Changed-Why:  

waiting for approval 


http://www.freebsd.org/cgi/query-pr.cgi?pr=177654 
Responsible-Changed-From-To: portmgr->dinoex 
Responsible-Changed-By: miwi 
Responsible-Changed-When: Sat Apr 6 13:33:30 UTC 2013 
Responsible-Changed-Why:  
approved. please fix your mailer, I sent the approval mail about 4 hours 
ago. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=177654 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: ports/177654: commit references a PR
Date: Sat,  6 Apr 2013 16:51:50 +0000 (UTC)

 Author: dinoex
 Date: Sat Apr  6 16:51:41 2013
 New Revision: 315746
 URL: http://svnweb.freebsd.org/changeset/ports/315746
 
 Log:
   - Security udpate to 12.15
   Security: http://www.opera.com/docs/changelogs/unified/1215/
   Security: http://www.opera.com/security/advisory/1046
   Security: http://www.opera.com/security/advisory/1047
   PR:		177654
   Approved by:	portmgr
 
 Modified:
   head/security/vuxml/vuln.xml
   head/www/opera-linuxplugins/Makefile
   head/www/opera-linuxplugins/distinfo
   head/www/opera/Makefile
   head/www/opera/distinfo
   head/www/opera/pkg-plist
 
 Modified: head/security/vuxml/vuln.xml
 ==============================================================================
 --- head/security/vuxml/vuln.xml	Sat Apr  6 16:43:28 2013	(r315745)
 +++ head/security/vuxml/vuln.xml	Sat Apr  6 16:51:41 2013	(r315746)
 @@ -51,6 +51,36 @@ Note:  Please add new entries to the beg
  
  -->
  <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
 +  <vuln vid="cebed39d-9e6f-11e2-b3f5-003067c2616f">
 +    <topic>opera -- moderately severe issue</topic>
 +    <affects>
 +      <package>
 +	<name>opera</name>
 +	<name>opera-devel</name>
 +	<name>linux-opera</name>
 +	<name>linux-opera-devel</name>
 +	<range><lt>12.15</lt></range>
 +      </package>
 +    </affects>
 +    <description>
 +      <body xmlns="http://www.w3.org/1999/xhtml">
 +	<p>Opera reports:</p>
 +	<blockquote cite="http://www.opera.com/support/kb/view/1042/">
 +	  <p>Fixed a moderately severe issue, as reported by Attila Suszte.</p>
 +	</blockquote>
 +      </body>
 +    </description>
 +    <references>
 +      <url>http://www.opera.com/docs/changelogs/unified/1215/</url>
 +      <url>http://www.opera.com/support/kb/view/1046/</url>
 +      <url>http://www.opera.com/support/kb/view/1047/</url>
 +    </references>
 +    <dates>
 +      <discovery>2013-04-04</discovery>
 +      <entry>2013-04-06</entry>
 +    </dates>
 +  </vuln>
 +
    <vuln vid="b6beb137-9dc0-11e2-882f-20cf30e32f6d">
      <topic>Subversion -- multiple vulnerabilities</topic>
      <affects>
 
 Modified: head/www/opera-linuxplugins/Makefile
 ==============================================================================
 --- head/www/opera-linuxplugins/Makefile	Sat Apr  6 16:43:28 2013	(r315745)
 +++ head/www/opera-linuxplugins/Makefile	Sat Apr  6 16:51:41 2013	(r315746)
 @@ -20,8 +20,8 @@ COMMENT=	Linux plugin support for the na
  
  RUN_DEPENDS=	${LOCALBASE}/lib/opera/pluginwrapper/operapluginwrapper:${PORTSDIR}/${PKGCATEGORY}/opera
  
 -OPERA_VER?=	12.14
 -OPERA_BUILD?=	1738
 +OPERA_VER?=	12.15
 +OPERA_BUILD?=	1748
  MASTER_SITES_VER_PATH=	linux/${OPERA_VER:S/.//}/
  
  USE_XZ=		yes
 
 Modified: head/www/opera-linuxplugins/distinfo
 ==============================================================================
 --- head/www/opera-linuxplugins/distinfo	Sat Apr  6 16:43:28 2013	(r315745)
 +++ head/www/opera-linuxplugins/distinfo	Sat Apr  6 16:51:41 2013	(r315746)
 @@ -1,2 +1,2 @@
 -SHA256 (opera-12.14-1738.i386.linux.tar.xz) = 00721be8475bd967ff0017d3db6c57d9d03b329bdcab2fba44231afccb0b9bd9
 -SIZE (opera-12.14-1738.i386.linux.tar.xz) = 13590832
 +SHA256 (opera-12.15-1748.i386.linux.tar.xz) = 602eff2177b42d809c44c832cb961eb5cfad1d502d20af31f082a703bee2eae2
 +SIZE (opera-12.15-1748.i386.linux.tar.xz) = 13576396
 
 Modified: head/www/opera/Makefile
 ==============================================================================
 --- head/www/opera/Makefile	Sat Apr  6 16:43:28 2013	(r315745)
 +++ head/www/opera/Makefile	Sat Apr  6 16:51:41 2013	(r315746)
 @@ -21,10 +21,8 @@ LIB_DEPENDS=	freetype:${PORTSDIR}/print/
  BUILD_DEPENDS=	${LOCALBASE}/bin/update-mime-database:${PORTSDIR}/misc/shared-mime-info
  RUN_DEPENDS=	${LOCALBASE}/bin/update-mime-database:${PORTSDIR}/misc/shared-mime-info
  
 -FORBIDDEN=	contains a "moderately severe issue" with unknown impact
 -
 -OPERA_VER?=	12.14
 -OPERA_BUILD?=	1738
 +OPERA_VER?=	12.15
 +OPERA_BUILD?=	1748
  MASTER_SITES_VER_PATH=	unix/${OPERA_VER:S/.//}
  
  USE_XZ=		yes
 
 Modified: head/www/opera/distinfo
 ==============================================================================
 --- head/www/opera/distinfo	Sat Apr  6 16:43:28 2013	(r315745)
 +++ head/www/opera/distinfo	Sat Apr  6 16:51:41 2013	(r315746)
 @@ -1,4 +1,4 @@
 -SHA256 (opera-12.14-1738.amd64.freebsd.tar.xz) = 3fe8e7736482fc74104363c521a491f5c0648c7c4c569a7d57e220e651124697
 -SIZE (opera-12.14-1738.amd64.freebsd.tar.xz) = 13443168
 -SHA256 (opera-12.14-1738.i386.freebsd.tar.xz) = 8c706c578ed6151a22ba30a1311e8aa51cd789851f962eab76df9d7c22db9d5a
 -SIZE (opera-12.14-1738.i386.freebsd.tar.xz) = 13488412
 +SHA256 (opera-12.15-1748.amd64.freebsd.tar.xz) = 1101c0a8882d6bbc5c892c170eeab4062b63a5d4e21c2928eca378bf9283e20d
 +SIZE (opera-12.15-1748.amd64.freebsd.tar.xz) = 13443688
 +SHA256 (opera-12.15-1748.i386.freebsd.tar.xz) = 654db056fb1d8f3490beaa4e0f6da27e46cd9903c5d34105b279a8e1ad2c2ad2
 +SIZE (opera-12.15-1748.i386.freebsd.tar.xz) = 13487204
 
 Modified: head/www/opera/pkg-plist
 ==============================================================================
 --- head/www/opera/pkg-plist	Sat Apr  6 16:43:28 2013	(r315745)
 +++ head/www/opera/pkg-plist	Sat Apr  6 16:51:41 2013	(r315746)
 @@ -216,6 +216,9 @@ share/mime/packages/opera-extension.xml
  %%DATADIR%%/region/in/standard_speeddial.ini
  %%DATADIR%%/region/ke/bookmarks.adr
  %%DATADIR%%/region/ke/standard_speeddial.ini
 +%%DATADIR%%/region/kz/bookmarks.adr
 +%%DATADIR%%/region/kz/search.ini
 +%%DATADIR%%/region/kz/standard_speeddial.ini
  %%DATADIR%%/region/latin_america/bookmarks.adr
  %%DATADIR%%/region/latin_america/search.ini
  %%DATADIR%%/region/latin_america/standard_speeddial.ini
 @@ -359,6 +362,7 @@ share/mime/packages/opera-extension.xml
  @dirrm %%DATADIR%%/region/mx
  @dirrm %%DATADIR%%/region/middle_east
  @dirrm %%DATADIR%%/region/latin_america
 +@dirrm %%DATADIR%%/region/kz
  @dirrm %%DATADIR%%/region/ke
  @dirrm %%DATADIR%%/region/in
  @dirrm %%DATADIR%%/region/id
 _______________________________________________
 svn-ports-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/svn-ports-all
 To unsubscribe, send any mail to "svn-ports-all-unsubscribe@freebsd.org"
 
State-Changed-From-To: open->closed 
State-Changed-By: linimon 
State-Changed-When: Sat Apr 6 23:15:58 UTC 2013 
State-Changed-Why:  
Already committed. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=177654 
>Unformatted:
