Re: [new] security/paperkey

2023-03-16 Thread Stuart Henderson
Imports are on hold until we're done with release. -- Sent from a phone, apologies for poor formatting. On 16 March 2023 14:45:04 Mikhail wrote: On Sat, Mar 04, 2023 at 09:10:46AM +0100, Omar Polo wrote: On 2023/03/04 09:00:25 +0300, Mikhail wrote: > On Fri, Mar 03, 2023 at 10:11:01PM +010

Re: [new] security/paperkey

2023-03-16 Thread Mikhail
On Sat, Mar 04, 2023 at 09:10:46AM +0100, Omar Polo wrote: > On 2023/03/04 09:00:25 +0300, Mikhail wrote: > > On Fri, Mar 03, 2023 at 10:11:01PM +0100, Omar Polo wrote: > > > Otherwise it looks good to me; ok op@ to import it > > > > Thanks for the review, next attempt attached. > > Still ok op@

Re: [NEW] lang/gleam

2023-03-16 Thread Robert Keizer
FWIW I am giving a talk at BSDCan this year relating to plumbing OpenBSD specific system calls through to the BEAM. I personally don't lisp, but I'm really happy to see more BEAM languages become available, there are interesting use cases ( I think ). On Wed, Mar 15, 2023 at 4:17 PM Volker Schlech

Re: openssl on sparc64: disable assembly

2023-03-16 Thread Peter Hessler
if go fast is broken, the go slow it shall be. OK On 2023 Mar 16 (Thu) at 15:28:56 +0100 (+0100), Theo Buehler wrote: :The AES-CBC implementation is broken on T-4 machines. I reported this :upstream: : :https://github.com/openssl/openssl/issues/20523 : :From grep I suspect that this also affects

openssl on sparc64: disable assembly

2023-03-16 Thread Theo Buehler
The AES-CBC implementation is broken on T-4 machines. I reported this upstream: https://github.com/openssl/openssl/issues/20523 >From grep I suspect that this also affects other AES modes, and also DES and Camellia. Until someone fixes this, I think we should disable the assembly optimizations.

Re: [update] www/freshrss to 1.21.0

2023-03-16 Thread A Tammy
On 3/16/23 04:42, Omar Polo wrote: > On 2023/03/15 18:13:13 -0400, aisha wrote: >> Hi, >> Attached trivial update for freshrss to 1.21.0 >> >> Has a security fix for CVE-2023-22481. >> Full feature changelog - >> https://github.com/FreshRSS/FreshRSS/releases/tag/1.21.0 >> >> Running it for a

Re: [maintainer update] remind 4.2.3 -> 4.2.4

2023-03-16 Thread A Tammy
On 3/16/23 01:40, Martin Ziemer wrote: > This patch updates remind from 4.2.3 to 4.2.4. > > Tested on amd64. > > Index: Makefile > === > RCS file: /cvs/ports/misc/remind/Makefile,v > retrieving revision 1.64 > diff -u -p -r1.64 Makef

[stable security update] samba-4.16.9

2023-03-16 Thread Jeremie Courreges-Anglas
I have only test-built this on -current, no new file / shlib changes. One security fix: - CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON. Full release notes: https://www.samba.org/samba/history/samba-4.16.9.html Tests and oks welcome. Index: Makefile

Re: UPDATE: OSV-Scanner-1.2.0

2023-03-16 Thread Benoit Lecocq
On 14/03/2023 13:16, Gonzalo L. Rodriguez wrote: Hello, Update for OSV-Scanner to 1.2.0: https://github.com/google/osv-scanner/releases/tag/v1.2.0 OK? Comments? ok benoit@ Cheers.- Index: Makefile === RCS file: /cvs/port

Re: [maintainer update] stumpwm-22.11

2023-03-16 Thread Omar Polo
On 2023/03/16 07:11:37 +0200, Timo Myyrä wrote: > Hi, > > Here's simple update to stumpwm, works fine on amd64. briefly tested; works fine with my configuration. Committed, thanks!

Re: [update] www/freshrss to 1.21.0

2023-03-16 Thread Omar Polo
On 2023/03/15 18:13:13 -0400, aisha wrote: > Hi, > Attached trivial update for freshrss to 1.21.0 > > Has a security fix for CVE-2023-22481. > Full feature changelog - > https://github.com/FreshRSS/FreshRSS/releases/tag/1.21.0 > > Running it for a while and everything is going smoothly, would