From nobody Thu Jun 11 13:24:47 2026 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gbk0314Jpz6hTBG; Thu, 11 Jun 2026 13:24:51 +0000 (UTC) (envelope-from bdrewery@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2610:1c1:1:6074::16:84]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "freefall.freebsd.org", Issuer "R12" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4gbk030SYSz3Y1X; Thu, 11 Jun 2026 13:24:51 +0000 (UTC) (envelope-from bdrewery@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1781184291; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=wAGICNRCGWaHNgZyEVgZawtUAqEOYONN0CND/HlJYis=; b=tiD+SLjiqLHdbr/IHFPaB/iW9kLQXxZKccyn947SeHwxhOVRt1MXUsDQnrMJn3Zgy8BZWG EzMdB/yYZOS/Ey5VhQUxaCody5z42NKRjcXuOIa+Nd6drPtRUa4c7ToA/4nGANkZ0wZul1 Nl5TanoCLPdeM4jjKMoi1twZQycVPsSGhYG6M9tukaolXbThLLSWkY8da9KXeHrfVVPPfa PG9zEV1gN4qOMjpHZx0qz3O/UuK9HOOxYkk17vRuSWM9Om+eHQri2UlkgygD11kUDVh/zK Jw8oLjtZc8SDcvpog0yhy3DDzDKefshE2a2/pDbtUqmGKw7oGSnucmHPcQyBDg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1781184291; a=rsa-sha256; cv=none; b=gqxfNe1q19FwKqTkwdc1K0QNiTsi8XKcJVaA/koEBhd24ThmavmTIZTYIYz2093ShBSmRf NFUppCXc05ZCcNfdQqXp+Ar/rNqJq1QCp0w+Vy9Ot3wDQrqTUmXIvH8uJsn1ymYGEXs1HL 0vqhiN3AenXBQwbcTjiAT8fsF0p6eBSjb4Bjt6/NFjlYfE989cpO21kOIzZsUiCYq1CDBp /MTNuY8jJoIigEpveEPUmYMZdCQpsUgBub5WEGCphbLDPyC+S4t1Ftj2kStgxJ4vshdeHB vVQ99wGhneLG2mbdtcp3lXJ8pQ2a/MebI+0iK280HHVvnuQJN5N3zrINPvoWZA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1781184291; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=wAGICNRCGWaHNgZyEVgZawtUAqEOYONN0CND/HlJYis=; b=rAoVybNtNHmqcWdUlu5gEVso3P+IsDBn4UCHS+i6lj5kpydOQfoXwE4doR5GrS+cTM9wTY 7/jG0su0ygkrocucQ5B2S/4wUMqO24+Q1CWEnJQ6SyieINMxIFQsqG6DvXGvZXaWvXO1vf E+K6OvEt03yB5lbr1aAQjSl175ya9EeUUJCotaMI6p6XUlTTEJ3bJjUW9wvnvw+5hX2k16 siJzOPnuyayKfqDlitSLEcvFQCbXT3R+4cOwCyCh94uivbe/5Grfkq/6dH8buWD3ZW1Yrs 6XrFsxS9wjaa1hW3gHJoSBHWzkKuXX3taIjztNzIp4gYkKZwum+GtKK2i0iokA== Received: from mail.xzibition.com (unknown [127.0.1.132]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by freefall.freebsd.org (Postfix) with ESMTPS id E3AB55EC6; Thu, 11 Jun 2026 13:24:50 +0000 (UTC) (envelope-from bdrewery@FreeBSD.org) Received: from localhost (localhost [172.31.3.2]) by mail.xzibition.com (Postfix) with ESMTP id 080BF251F; Thu, 11 Jun 2026 06:24:50 -0700 (PDT) X-Virus-Scanned: amavis at mail.xzibition.com Received: from mail.xzibition.com ([172.31.3.2]) by localhost (mail.xzibition.com [172.31.3.2]) (amavis, port 10026) with LMTP id UJMbyFhSr1Y6; Thu, 11 Jun 2026 06:24:48 -0700 (PDT) Message-ID: <48520742-7677-482b-9b4a-d8969b61f1c1@FreeBSD.org> DKIM-Filter: OpenDKIM Filter v2.10.3 mail.xzibition.com EDA54251D Date: Thu, 11 Jun 2026 06:24:47 -0700 List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-all@freebsd.org Sender: owner-dev-commits-ports-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: git: 782a4f0191e6 - 2026Q2 - security/openssl35: Security update to 3.5.7 To: Bernard Spil Cc: ports-committers@freebsd.org, dev-commits-ports-all@freebsd.org, dev-commits-ports-branches@freebsd.org References: <6a29489a.36fad.5c3fc8b3@gitrepo.freebsd.org> <07e943fa39f19f8b941a7c8931201e49@freebsd.org> Content-Language: en-US From: Bryan Drewery In-Reply-To: <07e943fa39f19f8b941a7c8931201e49@freebsd.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit On 6/11/26 1:27 AM, Bernard Spil wrote: > Hi Bryan, > > Looks like some left-over file from an earlier patch? The > patch-CVE-2026-2673 file is no longer in the ports tree. 3.5.6 wasn't cherry picked to quarterly, so the file still exists there. > > https://cgit.freebsd.org/ports/tree/security/openssl35/files > > security/openssl35/files/extra-patch-ktls > security/openssl35/files/extra-patch-util_find-doc-nits > security/openssl35/files/patch-Configurations_10-main.conf > security/openssl35/files/patch-crypto_threads__pthread.c > > On 2026-06-10 14:44, Bryan Drewery wrote: >> ===>  Patching for openssl35-3.5.7 >> ===>  Applying FreeBSD patches for openssl35-3.5.7 from >> /root/git/ports/quarterly/security/openssl35/files >> 2 out of 2 hunks failed--saving rejects to CHANGES.md.rej >> 1 out of 2 hunks failed--saving rejects to NEWS.md.rej >> Ignoring previously applied (or reversed) patch. >> 3 out of 3 hunks ignored--saving rejects to >> doc/man3/SSL_CTX_set1_curves.pod.rej >> Ignoring previously applied (or reversed) patch. >> 10 out of 10 hunks ignored--saving rejects to ssl/t1_lib.c.rej >> Ignoring previously applied (or reversed) patch. >> 4 out of 4 hunks ignored--saving rejects to >> test/tls13groupselection_test.c.rej >> ===>  FAILED Applying FreeBSD patch-CVE-2026-2673 >> ===> FAILED to apply cleanly FreeBSD patch(es) patch-CVE-2026-2673 >> *** Error code 1 >> >> Stop. >> >> >> On 6/10/26 4:20 AM, Bernard Spil wrote: >>> The branch 2026Q2 has been updated by brnrd: >>> >>> URL: >>> https://cgit.FreeBSD.org/ports/commit/?id=782a4f0191e61695062e54b07a7bf25be76eef5d >>> >>> commit 782a4f0191e61695062e54b07a7bf25be76eef5d >>> Author:     Bernard Spil >>> AuthorDate: 2026-06-10 09:41:09 +0000 >>> Commit:     Bernard Spil >>> CommitDate: 2026-06-10 11:20:51 +0000 >>> >>>      security/openssl35: Security update to 3.5.7 >>>           Security:       259b562f-64ab-11f1-8607-8447094a420f >>>      MFH:            2026Q2 >>>      (cherry picked from commit >>> 29d6a2251c64afc07e6bd9568f86c889c9606008) >>> --- >>>   security/openssl35/Makefile    |  3 +-- >>>   security/openssl35/distinfo    |  6 +++--- >>>   security/openssl35/pkg-message | 20 ++++++++++++++++++++ >>>   3 files changed, 24 insertions(+), 5 deletions(-) >>> >>> diff --git a/security/openssl35/Makefile b/security/openssl35/Makefile >>> index e4944d1c2052..ee81e449099b 100644 >>> --- a/security/openssl35/Makefile >>> +++ b/security/openssl35/Makefile >>> @@ -1,6 +1,5 @@ >>>   PORTNAME=    openssl >>> -PORTVERSION=    3.5.5 >>> -PORTREVISION=    1 >>> +PORTVERSION=    3.5.7 >>>   CATEGORIES=    security devel >>>   PKGNAMESUFFIX=    35 >>>   MASTER_SITES= >>> https://github.com/openssl/openssl/releases/download/${DISTNAME}/ >>> diff --git a/security/openssl35/distinfo b/security/openssl35/distinfo >>> index 4176d3ac1f44..926afadac784 100644 >>> --- a/security/openssl35/distinfo >>> +++ b/security/openssl35/distinfo >>> @@ -1,3 +1,3 @@ >>> -TIMESTAMP = 1769522567 >>> -SHA256 (openssl-3.5.5.tar.gz) = >>> b28c91532a8b65a1f983b4c28b7488174e4a01008e29ce8e69bd789f28bc2a89 >>> -SIZE (openssl-3.5.5.tar.gz) = 53104821 >>> +TIMESTAMP = 1781081653 >>> +SHA256 (openssl-3.5.7.tar.gz) = >>> a8c0d28a529ca480f9f36cf5792e2cd21984552a3c8e4aa11a24aa31aeac98e8 >>> +SIZE (openssl-3.5.7.tar.gz) = 53153930 >>> diff --git a/security/openssl35/pkg-message >>> b/security/openssl35/pkg-message >>> new file mode 100644 >>> index 000000000000..53d067cec3cd >>> --- /dev/null >>> +++ b/security/openssl35/pkg-message >>> @@ -0,0 +1,20 @@ >>> +[ >>> +{ type: install >>> +  message: <>> +This port (security/openssl35) will be renamed to >>> +security/openssl per 2026-07-01 (2026Q3) in anticipation >>> +of the End-of-Life of OpenSSL 3.0. >>> +See: https://openssl-library.org/roadmap/index.html >>> +EOM >>> +}, >>> +{ type: upgrade >>> +  message: <>> +This port (security/openssl) will update from 3.0 to 3.5 >>> +per 2026-07-01 (2026Q3) in anticipation of the End-of-Life >>> +of OpenSSL 3.0. >>> +A new port (security/openssl30) will be created for the >>> +remainder of the lifespan of OpenSSL 3.0 and FreeBSD 14. >>> +See: https://openssl-library.org/roadmap/index.html >>> +EOM >>> +}, >>> +] >>> >