From owner-freebsd-pkg@freebsd.org  Tue Jan 22 06:00:27 2019
Return-Path: <owner-freebsd-pkg@freebsd.org>
Delivered-To: freebsd-pkg@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3F58C14AEBAF
 for <freebsd-pkg@mailman.ysv.freebsd.org>;
 Tue, 22 Jan 2019 06:00:27 +0000 (UTC)
 (envelope-from joneum@FreeBSD.org)
Received: from toco-domains.de (mail.toco-domains.de
 [IPv6:2a01:4f8:150:50a5::6])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id A55D5731A1
 for <freebsd-pkg@freebsd.org>; Tue, 22 Jan 2019 06:00:26 +0000 (UTC)
 (envelope-from joneum@FreeBSD.org)
Received: from phantomias.home.jochen-neumeister.de
 (p5B0FDBE8.dip0.t-ipconnect.de [91.15.219.232])
 by toco-domains.de (Postfix) with ESMTPA id CA3AB13512CE;
 Tue, 22 Jan 2019 07:00:14 +0100 (CET)
Subject: Re: pkg: cached package php72-pear-Net_SMTP-1.8.1: size mismatch,
 cannot continue
To: Stefan Bethke <stb@lassitu.de>, Rainer Duffner <rainer@ultra-secure.de>
Cc: Jules Gilbert via freebsd-pkg <freebsd-pkg@freebsd.org>
References: <0F896E2C-E9EC-4C82-9693-EFCCFF0081C1@lassitu.de>
 <C47AEFBC-041F-4696-9FF3-FFA6FB68A76E@ultra-secure.de>
 <90B77FDC-8242-416A-B675-99543C0ABDBB@lassitu.de>
From: Jochen Neumeister <joneum@FreeBSD.org>
Message-ID: <ecd0dac4-8df7-05a7-bdd5-c9b2492cca06@FreeBSD.org>
Date: Tue, 22 Jan 2019 07:00:09 +0100
MIME-Version: 1.0
In-Reply-To: <90B77FDC-8242-416A-B675-99543C0ABDBB@lassitu.de>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: de-DE
X-Rspamd-Queue-Id: A55D5731A1
X-Spamd-Bar: --
Authentication-Results: mx1.freebsd.org
X-Spamd-Result: default: False [-2.98 / 15.00];
 local_wl_from(0.00)[FreeBSD.org];
 NEURAL_HAM_MEDIUM(-1.00)[-0.997,0];
 NEURAL_HAM_SHORT(-0.98)[-0.980,0];
 ASN(0.00)[asn:24940, ipnet:2a01:4f8::/29, country:DE];
 NEURAL_HAM_LONG(-1.00)[-1.000,0]
X-BeenThere: freebsd-pkg@freebsd.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Binary package management and package tools discussion
 <freebsd-pkg.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-pkg>,
 <mailto:freebsd-pkg-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pkg/>
List-Post: <mailto:freebsd-pkg@freebsd.org>
List-Help: <mailto:freebsd-pkg-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-pkg>,
 <mailto:freebsd-pkg-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Jan 2019 06:00:27 -0000

I have just brought the package with "make makesum" new.

A diff does not show any other SHA256 and SIZE value.

Did you try it again?

It would be problematic if SHA256 and SIZE had other values.

As recommended on the website, however, should be considered to rebuild 
pear ports on GitHub. But that is a lot of work though.


Greetings

Jochen



On 21.01.19 21:12, Stefan Bethke wrote:
> Are FreeBSD pre-build packages affected? That would indeed be a concern.
>
>> Am 21.01.2019 um 20:30 schrieb Rainer Duffner <rainer@ultra-secure.de>:
>>
>>
>>
>>> Am 21.01.2019 um 19:53 schrieb Stefan Bethke <stb@lassitu.de>:
>>>
>>> I’m having trouble installing packages from the official repo on a 12-stable system:
>>>
>> …
>>
>>> What’s happening?
>>
>>
>> Well, for once the PEAR project webserver was compromised:
>>
>>
>> http://pear.php.net
>>
>> https://www.golem.de/news/paketmanagement-php-codesammlung-pear-wurde-gehackt-1901-138863.html
>>
>>
>> That could have something to do with that.
>>
>> I’m sure they’ll rebuild the packages on the cluster in a short while.
>>
>>
>>
>>
>>