Re: UPDATE: net/tinc (CVE-2018-16737, CVE-2018-16738, CVE-2018-16758) and quirks

2018-10-09 Thread Jeremie Courreges-Anglas
On Tue, Oct 09 2018, Jeremie Courreges-Anglas wrote: > On Tue, Oct 09 2018, Rafael Sadowski wrote: >> Hi All, >> >> simple security update. This release prevent from the following CVEs: >> >> oracle attacks (CVE-2018-16737, CVE-2018-16738). >> MITM from forcing a NULL cipher for UDP (CVE-2018-167

Re: Collision in py-six-1.11.0 and py-llvm-6.0.1p0

2018-10-09 Thread Jeremie Courreges-Anglas
On Tue, Oct 09 2018, Stuart Henderson wrote: > On 2018/10/09 08:33, Sebastien Marie wrote: >> Hi, >> >> While upgrading, I saw the following: >> >> Collision in py-llvm-6.0.1->6.0.1p0: the following files already exist >> /usr/local/lib/python2.7/site-packages/six.py (py-six-1.11.0 and

Re: Collision in py-six-1.11.0 and py-llvm-6.0.1p0

2018-10-09 Thread Stuart Henderson
On 2018/10/09 08:33, Sebastien Marie wrote: > Hi, > > While upgrading, I saw the following: > > Collision in py-llvm-6.0.1->6.0.1p0: the following files already exist > /usr/local/lib/python2.7/site-packages/six.py (py-six-1.11.0 and > py-llvm-6.0.1p0) > > $ pkg_locate '*2.7/site-packag

sparc64 texlive [Re: sparc64 bulk build report]

2018-10-09 Thread Stuart Henderson
On 2018/10/08 12:12, Stuart Henderson wrote: > On 2018/10/08 09:37, Stuart Henderson wrote: > > On 2018/10/07 16:05, lan...@openbsd.org wrote: > > > http://build-failures.rhaalovely.net//sparc64/2018-09-30/print/texlive/base.log > > > > Not new (same failure was present in 2018-07-31, but not in t

Re: [PATCH] sysutils/ansible

2018-10-09 Thread Stuart Henderson
Too late for 6.4, we are onto *important* fixes only at this point, please send to the ports' maintainer post-6.4 (REVISION bumps needed for both subpackages). On 2018/10/09 22:18, Holger Mikolon wrote: > Any chance to get this simple fix in for 6.4? > > Regards > Holger > > > Date: Sun, 11 Feb

Re: [PATCH] sysutils/ansible

2018-10-09 Thread Holger Mikolon
Any chance to get this simple fix in for 6.4? Regards Holger > Date: Sun, 11 Feb 2018 21:43:03 > From: Holger Mikolon > To: ports@openbsd.org > Subject: [PATCH] sysutils/ansible > > It looks like the contents of DESCR-main and DESCR-html is mixed in > sysutils/ansible. > > Regards > Holger >

Re: UPDATE: net/tinc (CVE-2018-16737, CVE-2018-16738, CVE-2018-16758) and quirks

2018-10-09 Thread Stuart Henderson
I have read the source diff between the versions, looks good, and it's something we'd want to go in for stable if it missed release. OK sthen@ On 2018/10/09 19:31, Rafael Sadowski wrote: > On Tue Oct 09, 2018 at 09:01:46AM +0100, Stuart Henderson wrote: > > On 2018/10/09 07:11, Rafael Sadowski

Re: UPDATE: net/tinc (CVE-2018-16737, CVE-2018-16738, CVE-2018-16758) and quirks

2018-10-09 Thread Rafael Sadowski
On Tue Oct 09, 2018 at 09:01:46AM +0100, Stuart Henderson wrote: > On 2018/10/09 07:11, Rafael Sadowski wrote: > > diff -u -p -r1.635 Quirks.pm > > --- devel/quirks/files/Quirks.pm8 Oct 2018 12:08:08 - 1.635 > > +++ devel/quirks/files/Quirks.pm9 Oct 2018 05:06:26 - > > @@ -119

Re: UPDATE: net/tinc (CVE-2018-16737, CVE-2018-16738, CVE-2018-16758) and quirks

2018-10-09 Thread Stuart Henderson
On 2018/10/09 07:11, Rafael Sadowski wrote: > diff -u -p -r1.635 Quirks.pm > --- devel/quirks/files/Quirks.pm 8 Oct 2018 12:08:08 - 1.635 > +++ devel/quirks/files/Quirks.pm 9 Oct 2018 05:06:26 - > @@ -1194,6 +1194,7 @@ my $cve = { > 'www/p5-CGI-Application' => 'p5-CGI-

Re: UPDATE: net/tinc (CVE-2018-16737, CVE-2018-16738, CVE-2018-16758) and quirks

2018-10-09 Thread Jeremie Courreges-Anglas
On Tue, Oct 09 2018, Rafael Sadowski wrote: > Hi All, > > simple security update. This release prevent from the following CVEs: > > oracle attacks (CVE-2018-16737, CVE-2018-16738). > MITM from forcing a NULL cipher for UDP (CVE-2018-16758). > > Our patched also merged upstream. OK before ports loo