From owner-freebsd-ports@freebsd.org Tue Jun 14 10:10:37 2016 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3A50DAF1898 for ; Tue, 14 Jun 2016 10:10:37 +0000 (UTC) (envelope-from carmel_ny@outlook.com) Received: from COL004-OMC2S16.hotmail.com (col004-omc2s16.hotmail.com [65.55.34.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "*.outlook.com", Issuer "Microsoft IT SSL SHA2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 0C1ED27AD; Tue, 14 Jun 2016 10:10:36 +0000 (UTC) (envelope-from carmel_ny@outlook.com) Received: from NAM01-BN3-obe.outbound.protection.outlook.com ([65.55.34.72]) by COL004-OMC2S16.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008); Tue, 14 Jun 2016 03:10:36 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=VotBC4zJiyqQTdhdHjiIuuzOqGoweoKkyUDzRddApiE=; b=iwi+/DhuQHVJPNRI3e85D64mfYJN8jOlmoHE8oaHlnAxy11o4LD2+A6biTFxelQ9D39FoPHmDLSI112kFXBoYoKqYDhAdwb3e7bNrHOwM24EnFQMh00+KhfXZj29DQm5vcc61eWyMoDjI8VfMIC3P5FLsLhpVntN/Yw9oQUaufPctilvTQCLvIkOq+uNUq75RtWVH7JdanBrsJilxXncPmBj3OaR9YgQZryDLfvCed3etVHofr3Ps4RCkSxxviM3vARl77G1D9AHzTtvKJu/N4b/GeaIipkzZ21C2JNcHkxbOHbnYFQUJiET/xxrFeCO/l1jKFSH8UMP1XQ+Xm9Qhw== Received: from BN3NAM01FT050.eop-nam01.prod.protection.outlook.com (10.152.66.60) by BN3NAM01HT227.eop-nam01.prod.protection.outlook.com (10.152.66.233) with Microsoft SMTP Server (TLS) id 15.1.511.7; Tue, 14 Jun 2016 10:10:34 +0000 Received: from SN2PR20MB0845.namprd20.prod.outlook.com (10.152.66.52) by BN3NAM01FT050.mail.protection.outlook.com (10.152.66.164) with Microsoft SMTP Server (TLS) id 15.1.517.7 via Frontend Transport; Tue, 14 Jun 2016 10:10:34 +0000 Received: from SN2PR20MB0845.namprd20.prod.outlook.com ([10.169.198.13]) by SN2PR20MB0845.namprd20.prod.outlook.com ([10.169.198.13]) with mapi id 15.01.0517.011; Tue, 14 Jun 2016 10:10:34 +0000 From: Gerard Seibert To: FreeBSD Ports CC: "dinoex@FreeBSD.org" Subject: openssl-1.0.2.13 Thread-Topic: openssl-1.0.2.13 Thread-Index: AQHRxiT9AuX2gEslAk+bEc8a2LhBLA== Date: Tue, 14 Jun 2016 10:10:34 +0000 Message-ID: Reply-To: FreeBSD Ports Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=softfail (sender IP is 25.152.66.52) smtp.mailfrom=outlook.com; freebsd.org; dkim=none (message not signed) header.d=none;freebsd.org; dmarc=fail action=none header.from=outlook.com; received-spf: SoftFail (protection.outlook.com: domain of transitioning outlook.com discourages use of 25.152.66.52 as permitted sender) x-ms-exchange-messagesentrepresentingtype: 1 x-eopattributedmessage: 0 x-forefront-antispam-report: CIP:25.152.66.52; IPV:NLI; CTRY:GB; EFV:NLI; SFV:NSPM; SFS:(10019020)(98900003); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3NAM01HT227; H:SN2PR20MB0845.namprd20.prod.outlook.com; FPR:; SPF:None; LANG:en; x-ms-office365-filtering-correlation-id: 44e4b8d0-887f-48fe-01e3-08d3943c1ee4 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(1601124038)(5061506196)(5061507196)(1603103041)(1601125047); SRVR:BN3NAM01HT227; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(432015012)(82015046); SRVR:BN3NAM01HT227; BCL:0; PCL:0; RULEID:; SRVR:BN3NAM01HT227; x-forefront-prvs: 09730BD177 Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Jun 2016 10:10:34.0798 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3NAM01HT227 X-OriginalArrivalTime: 14 Jun 2016 10:10:36.0156 (UTC) FILETIME=[FE82C3C0:01D1C624] X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Jun 2016 10:10:37 -0000 I have a question regarding "openssl-1.0.2.13". Since the port is marked as "vulnerable", I was wondering if there is any idea when a corrected port will be released? Also, according to the documentation on https://vuxml.FreeBSD.org/freebsd/6f0529e2-2e82-11e6-b2ec-b499baebfeaf.html this only affects versions of openssl < 1.0.2_13 Affected packages openssl < 1.0.2_13 0 <=3D openssl-devel libressl < 2.3.6 libressl-devel < 2.4.1 I am not an expert on this, so perhaps I am misinterpreting this data. Thanks :) --=20 Carmel