Opened 3 years ago

Closed 3 years ago

#64199 closed update (fixed)

ghidra @9.2.2_1: update to 10.1.1

Reported by: cooljeanius (Eric Gallager) Owned by: hexagonal-sun (Matthew Leach)
Priority: High Milestone:
Component: ports Version: 2.7.1
Keywords: security haspatch Cc:
Port: ghidra

Description

ghidra 10.1 includes a fix for the log4j vulnerability: https://twitter.com/nsa_csdirector/status/1469439084091355141

Unfortunately, livecheck doesn't catch this update:

$ port -v livecheck ghidra
Error: cannot check if ghidra was updated (regex didn't match)

Change History (4)

comment:1 Changed 3 years ago by jmroot (Joshua Root)

Cc: hexagonal-sun removed
Keywords: security added
Owner: set to hexagonal-sun
Status: newassigned

comment:2 Changed 3 years ago by cooljeanius (Eric Gallager)

This PR fixes the update, it doesn't fix the livecheck, though: https://github.com/macports/macports-ports/pull/13405

comment:3 Changed 3 years ago by ryandesign (Ryan Carsten Schmidt)

Keywords: haspatch added
Summary: ghidra @9.2.2_1: update to 10.1ghidra @9.2.2_1: update to 10.1.1

My follow-up commits in that PR correct the usage of the github portgroup and thereby the livecheck.

comment:4 Changed 3 years ago by cooljeanius (Eric Gallager)

Resolution: fixed
Status: assignedclosed

In ff384f8c0e444bfa42e41b960da4e537ae9a8d73/macports-ports (master):

ghidra: Update to 10.1.1 [CVE-2021-44228]

  • switch to github portgroup
  • fixes log4j vulnerability

Closes: #64199

Note: See TracTickets for help on using tickets.