From owner-freebsd-ports@freebsd.org Tue Jul 12 15:20:45 2016 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 19CF7B933D3 for ; Tue, 12 Jul 2016 15:20:45 +0000 (UTC) (envelope-from bendikro@gmail.com) Received: from mail-io0-x233.google.com (mail-io0-x233.google.com [IPv6:2607:f8b0:4001:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id BDA5F118A for ; Tue, 12 Jul 2016 15:20:44 +0000 (UTC) (envelope-from bendikro@gmail.com) Received: by mail-io0-x233.google.com with SMTP id 38so19526685iol.0 for ; Tue, 12 Jul 2016 08:20:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=UsDLGYX2u4s7zbQvL7wqgl/cYKQzboFn56Jx8iUD9XY=; b=sZ2/2WdtbpAxHPzSuJS9Ygd1T8IQ9K1JuwQsyJ3yte0rxC+xUr27JVw4IdTpZgQw29 H0hq8hmvrTw2cMovHtORZGRH8jY7Z/TBcI/64/US88zM8HNKMSUnrjEpzGZ78UUoW+YT ksVl/YeoZwtbe4zvsLecjq5nqCQ5GOujCX1rzjZp7LFZhXrxgE2kjeeDyr+PFY4tFlJj bYl6/QxxkL1GF2b7AfSUQMgTAGZfLz4p5dTJhcVDRX6XHvJ9HTvEU93GII39aQ+I7A6P yVQ+5oAWN9LNxhWd+uwawXB1u1Rthb4+w0ZRQiGBvxhm8zlqL1ouWcvmn/FdE+Hhfn4c sQ1w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=UsDLGYX2u4s7zbQvL7wqgl/cYKQzboFn56Jx8iUD9XY=; b=Mng6+fsKX/QIiYXQbz+D+ZBEAjHcsQSs+vT4yVbCySojekNpG0c4FyABN73U5rS6Pj 1oXtYvA8+Ux3A8ygEv4RKDd3N6ipb6ZLWuztflXxSNw8WuZ6E9aanKXekX2nroo2/SKf 8zbc3RPyJrodiuvAZUIRyTYGEQdSSthwPq+dl9vO8Xw5UsPl7AYVLsxlGRKRgS39Ru7M 9KG/F3412iveGUAji+Nff46fNn5FVoBNgzhu8rstY+XhGLfqPmRdqXhKlBQb9u3k/rfB YIJMZyQXrNSsInRWEbewYGrWpMfJLfdi75ZoccZz9AK2Kcj55Zs/eLpLCbFpTzLNIk6v l4ig== X-Gm-Message-State: ALyK8tIpy4uvW/iDw1svafawv9ZwEBCBglREpal0CeYDwtSaUiKu6/DtC5YIv5HGVg2OLP9GIZG6DrnMmReVUw== X-Received: by 10.107.144.10 with SMTP id s10mr3270581iod.165.1468336843619; Tue, 12 Jul 2016 08:20:43 -0700 (PDT) MIME-Version: 1.0 Sender: bendikro@gmail.com Received: by 10.107.14.129 with HTTP; Tue, 12 Jul 2016 08:20:14 -0700 (PDT) In-Reply-To: References: From: Bendik Date: Tue, 12 Jul 2016 17:20:14 +0200 X-Google-Sender-Auth: pWkSfRBeOVfuO1SuhqkaASXRVY8 Message-ID: Subject: Re: Deluge 1.3.x and libtorrent-rasterbar v1.1.0 To: "Mikhail T." Cc: freebsd-ports@freebsd.org Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jul 2016 15:20:45 -0000 Patching Deluge 1.3.x is not straight forward, so I wouldn't go that route just yet. It looks like the fix to the CVE will be backported to libtorrent v1.0: https://github.com/arvidn/libtorrent/issues/780 Regards Bendik On Tue, Jul 12, 2016 at 3:23 PM, Mikhail T. wrote: > On 11.07.2016 09:46, Bendik wrote: > > Latest version of libtorrent-rasterbar is now 1.1.0, and ports has v1.0.9 > so it might be tempting to update it (like Arch did without testing). > > Khm, I have the update (almost) ready here -- and testing it with > net-p2p/qbittorrent... > > However, libtorrent v1.1.0 introduces backwards incompatible changes, and > will not work with Deluge 1.3.x. > > Is it difficult to patch up Deluge? libtorrent-rasterbar has a CVE > > against it -- including version 1.1.0 -- and so sticking to the old version > for very long is not going to work... > > -mi > >