Re: SECURITY UPDATE: www/kibana 5.4.2 => 5.4.3
On Wed, Jul 05, 2017 at 02:07:17PM +0300, Paul Irofti wrote: > On Sun, Jul 02, 2017 at 12:38:58PM +0300, Pavel Korovin wrote: > > Dear all, > > > > Please find the update for the latest www/kibana attached. > > > > Announce: https://www.elastic.co/blog/kibana-5-4-3-released > > > > Release Notes: > > https://www.elastic.co/guide/en/kibana/current/release-notes-5.4.3.html > > I am no expert in this domain, but how is this a security update? The > release notes show three bug fixes, all of which look to the untrained > eye like functional improvements more than anything. The "Announce:" link contains this: "The 5.4.3 release contains an important security fix in X-Pack Security. Please read the details below."
Re: SECURITY UPDATE: www/kibana 5.4.2 => 5.4.3
On Sun, Jul 02, 2017 at 12:38:58PM +0300, Pavel Korovin wrote: > Dear all, > > Please find the update for the latest www/kibana attached. > > Announce: https://www.elastic.co/blog/kibana-5-4-3-released > > Release Notes: > https://www.elastic.co/guide/en/kibana/current/release-notes-5.4.3.html I am no expert in this domain, but how is this a security update? The release notes show three bug fixes, all of which look to the untrained eye like functional improvements more than anything. > > -- > With best regards, > Pavel Korovin > Index: Makefile > === > RCS file: /cvs/ports/www/kibana/Makefile,v > retrieving revision 1.16 > diff -u -p -r1.16 Makefile > --- Makefile 24 Jun 2017 11:22:19 - 1.16 > +++ Makefile 2 Jul 2017 09:07:59 - > @@ -2,7 +2,7 @@ > > COMMENT= browser based analytics/search interface to ElasticSearch > > -V= 5.4.2 > +V= 5.4.3 > PKGNAME= kibana-${V} > DISTNAME=${PKGNAME}-darwin-x86_64 > > Index: distinfo > === > RCS file: /cvs/ports/www/kibana/distinfo,v > retrieving revision 1.14 > diff -u -p -r1.14 distinfo > --- distinfo 24 Jun 2017 11:22:19 - 1.14 > +++ distinfo 2 Jul 2017 09:07:59 - > @@ -1,2 +1,2 @@ > -SHA256 (kibana-5.4.2-darwin-x86_64.tar.gz) = > tJ0PTEDdnLfwBugZIJ1hrWmLNTd+vDp0QQbFE3EaPKY= > -SIZE (kibana-5.4.2-darwin-x86_64.tar.gz) = 51531040 > +SHA256 (kibana-5.4.3-darwin-x86_64.tar.gz) = > 1Fvmricoq99SMzDobZIbrwBCtyyTxHjgWQy3LKyfmYU= > +SIZE (kibana-5.4.3-darwin-x86_64.tar.gz) = 51595379 > Index: pkg/PLIST > === > RCS file: /cvs/ports/www/kibana/pkg/PLIST,v > retrieving revision 1.14 > diff -u -p -r1.14 PLIST > --- pkg/PLIST 24 Jun 2017 11:22:19 - 1.14 > +++ pkg/PLIST 2 Jul 2017 09:08:02 - > @@ -27746,6 +27746,7 @@ kibana/node_modules/caniuse-db/features- > kibana/node_modules/caniuse-db/features-json/getrandomvalues.json > kibana/node_modules/caniuse-db/features-json/hardwareconcurrency.json > kibana/node_modules/caniuse-db/features-json/hashchange.json > +kibana/node_modules/caniuse-db/features-json/heif.json > kibana/node_modules/caniuse-db/features-json/hevc.json > kibana/node_modules/caniuse-db/features-json/hidden.json > kibana/node_modules/caniuse-db/features-json/high-resolution-time.json > @@ -32500,6 +32501,7 @@ kibana/node_modules/fbjs/node_modules/pr > kibana/node_modules/fbjs/node_modules/promise/domains/node-extensions.js > kibana/node_modules/fbjs/node_modules/promise/domains/rejection-tracking.js > kibana/node_modules/fbjs/node_modules/promise/domains/synchronous.js > +kibana/node_modules/fbjs/node_modules/promise/index.d.ts > kibana/node_modules/fbjs/node_modules/promise/index.js > kibana/node_modules/fbjs/node_modules/promise/lib/ > kibana/node_modules/fbjs/node_modules/promise/lib/core.js > @@ -39520,6 +39522,7 @@ kibana/node_modules/prop-types/node_modu > > kibana/node_modules/prop-types/node_modules/promise/domains/node-extensions.js > > kibana/node_modules/prop-types/node_modules/promise/domains/rejection-tracking.js > kibana/node_modules/prop-types/node_modules/promise/domains/synchronous.js > +kibana/node_modules/prop-types/node_modules/promise/index.d.ts > kibana/node_modules/prop-types/node_modules/promise/index.js > kibana/node_modules/prop-types/node_modules/promise/lib/ > kibana/node_modules/prop-types/node_modules/promise/lib/core.js > @@ -41110,6 +41113,7 @@ kibana/node_modules/react-addons-shallow > > kibana/node_modules/react-addons-shallow-compare/node_modules/promise/domains/node-extensions.js > > kibana/node_modules/react-addons-shallow-compare/node_modules/promise/domains/rejection-tracking.js > > kibana/node_modules/react-addons-shallow-compare/node_modules/promise/domains/synchronous.js > +kibana/node_modules/react-addons-shallow-compare/node_modules/promise/index.d.ts > > kibana/node_modules/react-addons-shallow-compare/node_modules/promise/index.js > kibana/node_modules/react-addons-shallow-compare/node_modules/promise/lib/ > > kibana/node_modules/react-addons-shallow-compare/node_modules/promise/lib/core.js > @@ -42297,6 +42301,7 @@ kibana/node_modules/react-addons-test-ut > > kibana/node_modules/react-addons-test-utils/node_modules/promise/domains/node-extensions.js > > kibana/node_modules/react-addons-test-utils/node_modules/promise/domains/rejection-tracking.js > > kibana/node_modules/react-addons-test-utils/node_modules/promise/domains/synchronous.js > +kibana/node_modules/react-addons-test-utils/node_modules/promise/index.d.ts > kibana/node_modules/react-addons-test-utils/node_modules/promise/index.js > kibana/node_modules/react-addons-test-utils/node_modules/promise/lib/ > kibana/node_modules/react-addons-test-utils/node_modules/promise/lib/core.js > @@ -44938,6 +44943,7 @@
SECURITY UPDATE: www/kibana 5.4.2 => 5.4.3
Dear all, Please find the update for the latest www/kibana attached. Announce: https://www.elastic.co/blog/kibana-5-4-3-released Release Notes: https://www.elastic.co/guide/en/kibana/current/release-notes-5.4.3.html -- With best regards, Pavel Korovin Index: Makefile === RCS file: /cvs/ports/www/kibana/Makefile,v retrieving revision 1.16 diff -u -p -r1.16 Makefile --- Makefile24 Jun 2017 11:22:19 - 1.16 +++ Makefile2 Jul 2017 09:07:59 - @@ -2,7 +2,7 @@ COMMENT= browser based analytics/search interface to ElasticSearch -V= 5.4.2 +V= 5.4.3 PKGNAME= kibana-${V} DISTNAME= ${PKGNAME}-darwin-x86_64 Index: distinfo === RCS file: /cvs/ports/www/kibana/distinfo,v retrieving revision 1.14 diff -u -p -r1.14 distinfo --- distinfo24 Jun 2017 11:22:19 - 1.14 +++ distinfo2 Jul 2017 09:07:59 - @@ -1,2 +1,2 @@ -SHA256 (kibana-5.4.2-darwin-x86_64.tar.gz) = tJ0PTEDdnLfwBugZIJ1hrWmLNTd+vDp0QQbFE3EaPKY= -SIZE (kibana-5.4.2-darwin-x86_64.tar.gz) = 51531040 +SHA256 (kibana-5.4.3-darwin-x86_64.tar.gz) = 1Fvmricoq99SMzDobZIbrwBCtyyTxHjgWQy3LKyfmYU= +SIZE (kibana-5.4.3-darwin-x86_64.tar.gz) = 51595379 Index: pkg/PLIST === RCS file: /cvs/ports/www/kibana/pkg/PLIST,v retrieving revision 1.14 diff -u -p -r1.14 PLIST --- pkg/PLIST 24 Jun 2017 11:22:19 - 1.14 +++ pkg/PLIST 2 Jul 2017 09:08:02 - @@ -27746,6 +27746,7 @@ kibana/node_modules/caniuse-db/features- kibana/node_modules/caniuse-db/features-json/getrandomvalues.json kibana/node_modules/caniuse-db/features-json/hardwareconcurrency.json kibana/node_modules/caniuse-db/features-json/hashchange.json +kibana/node_modules/caniuse-db/features-json/heif.json kibana/node_modules/caniuse-db/features-json/hevc.json kibana/node_modules/caniuse-db/features-json/hidden.json kibana/node_modules/caniuse-db/features-json/high-resolution-time.json @@ -32500,6 +32501,7 @@ kibana/node_modules/fbjs/node_modules/pr kibana/node_modules/fbjs/node_modules/promise/domains/node-extensions.js kibana/node_modules/fbjs/node_modules/promise/domains/rejection-tracking.js kibana/node_modules/fbjs/node_modules/promise/domains/synchronous.js +kibana/node_modules/fbjs/node_modules/promise/index.d.ts kibana/node_modules/fbjs/node_modules/promise/index.js kibana/node_modules/fbjs/node_modules/promise/lib/ kibana/node_modules/fbjs/node_modules/promise/lib/core.js @@ -39520,6 +39522,7 @@ kibana/node_modules/prop-types/node_modu kibana/node_modules/prop-types/node_modules/promise/domains/node-extensions.js kibana/node_modules/prop-types/node_modules/promise/domains/rejection-tracking.js kibana/node_modules/prop-types/node_modules/promise/domains/synchronous.js +kibana/node_modules/prop-types/node_modules/promise/index.d.ts kibana/node_modules/prop-types/node_modules/promise/index.js kibana/node_modules/prop-types/node_modules/promise/lib/ kibana/node_modules/prop-types/node_modules/promise/lib/core.js @@ -41110,6 +41113,7 @@ kibana/node_modules/react-addons-shallow kibana/node_modules/react-addons-shallow-compare/node_modules/promise/domains/node-extensions.js kibana/node_modules/react-addons-shallow-compare/node_modules/promise/domains/rejection-tracking.js kibana/node_modules/react-addons-shallow-compare/node_modules/promise/domains/synchronous.js +kibana/node_modules/react-addons-shallow-compare/node_modules/promise/index.d.ts kibana/node_modules/react-addons-shallow-compare/node_modules/promise/index.js kibana/node_modules/react-addons-shallow-compare/node_modules/promise/lib/ kibana/node_modules/react-addons-shallow-compare/node_modules/promise/lib/core.js @@ -42297,6 +42301,7 @@ kibana/node_modules/react-addons-test-ut kibana/node_modules/react-addons-test-utils/node_modules/promise/domains/node-extensions.js kibana/node_modules/react-addons-test-utils/node_modules/promise/domains/rejection-tracking.js kibana/node_modules/react-addons-test-utils/node_modules/promise/domains/synchronous.js +kibana/node_modules/react-addons-test-utils/node_modules/promise/index.d.ts kibana/node_modules/react-addons-test-utils/node_modules/promise/index.js kibana/node_modules/react-addons-test-utils/node_modules/promise/lib/ kibana/node_modules/react-addons-test-utils/node_modules/promise/lib/core.js @@ -44938,6 +44943,7 @@ kibana/node_modules/react-dom/node_modul kibana/node_modules/react-dom/node_modules/promise/domains/node-extensions.js kibana/node_modules/react-dom/node_modules/promise/domains/rejection-tracking.js kibana/node_modules/react-dom/node_modules/promise/domains/synchronous.js +kibana/node_modules/react-dom/node_modules/promise/index.d.ts kibana/node_modules/react-dom/node_modules/promise/index.js kibana/node_modules/react-dom/node_modules/promise/lib/