From owner-freebsd-ports@freebsd.org Sat Dec 22 12:40:10 2018 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D871A1352B22; Sat, 22 Dec 2018 12:40:10 +0000 (UTC) (envelope-from list_freebsd@bluerosetech.com) Received: from echo.brtsvcs.net (echo.brtsvcs.net [IPv6:2607:f740:c::4ae]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7A80586F9E; Sat, 22 Dec 2018 12:40:10 +0000 (UTC) (envelope-from list_freebsd@bluerosetech.com) Received: from chombo.houseloki.net (c-73-240-250-185.hsd1.or.comcast.net [73.240.250.185]) by echo.brtsvcs.net (Postfix) with ESMTPS id 4E06638DA1; Sat, 22 Dec 2018 04:40:09 -0800 (PST) Received: from [IPv6:fe80::dd2a:ba9e:2d4a:7c5f] (unknown [IPv6:fe80::dd2a:ba9e:2d4a:7c5f]) by chombo.houseloki.net (Postfix) with ESMTPSA id B9A9B1ACF; Sat, 22 Dec 2018 04:40:08 -0800 (PST) Subject: Re: Bug 233749 - net/samba47, net/samba48: Merge ports r486043 to 2018Q4 (Fixes several vulnerabilities) To: Kurt Jaeger Cc: ports-secteam@freebsd.org, "Timur I. Bakeyev" , FreeBSD Ports ML , portmgr@freebsd.org References: <1b5e5e0a-f492-5ec0-a70c-dc34d1d26c01@bluerosetech.com> <20181222120252.GD84895@home.opsec.eu> From: Mel Pilgrim Message-ID: <4f1cc9fa-af6a-215e-2654-1d94127fa57a@bluerosetech.com> Date: Sat, 22 Dec 2018 04:40:06 -0800 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.3.3 MIME-Version: 1.0 In-Reply-To: <20181222120252.GD84895@home.opsec.eu> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 7A80586F9E X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-6.99 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; NEURAL_HAM_SHORT(-0.99)[-0.990,0]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; REPLY(-4.00)[] X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Dec 2018 12:40:11 -0000 On 2018-12-22 4:02, Kurt Jaeger wrote: > Hi! > >> On 2018-12-12 19:19, Mel Pilgrim wrote: >>> Would someone work on ports/233749, please?  The original security fix >>> was committed to head 15 days ago, but has yet to be merged to quarterly. >> >> I realize it's the holidays, but this is a security fix for a major port. >> Or is it the plan to let this go unfixed in 2018Q4? > > Hoping about a plan is unfortunatly expecting a bit too much right now, > with all the updates, holidays etc going on. I guess it's not easy to estimate > if the MFH would fit right in. > > After checking the commits to samba47, I guess something like this might work: > > /usr/ports/Tools/scripts/mfh 2018Q4 486043 I don't have a commit bit. Instead I create local copies of specific ports as a poor pleb's MFH (e.g., 2018Q4/local/net_samba48 copied from head/net/samba48). The ability to switch pkg origins makes it fairly painless for most ports.