From owner-freebsd-ports@freebsd.org  Fri Jun 30 16:18:49 2017
Return-Path: <owner-freebsd-ports@freebsd.org>
Delivered-To: freebsd-ports@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id E02C2D95309
 for <freebsd-ports@mailman.ysv.freebsd.org>;
 Fri, 30 Jun 2017 16:18:49 +0000 (UTC) (envelope-from adamw@adamw.org)
Received: from apnoea.adamw.org (apnoea.adamw.org [104.225.5.94])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "apnoea.adamw.org",
 Issuer "Let's Encrypt Authority X3" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 7263874083;
 Fri, 30 Jun 2017 16:18:49 +0000 (UTC) (envelope-from adamw@adamw.org)
Received: by apnoea.adamw.org (OpenSMTPD) with ESMTPSA id 18bde91e
 TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO;
 Fri, 30 Jun 2017 10:18:42 -0600 (MDT)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Subject: Re: Vulnerability
From: Adam Weinberger <adamw@adamw.org>
In-Reply-To: <6d826a0d-b54c-ef9d-88d3-bdf4f159c434@cloudzeeland.nl>
Date: Fri, 30 Jun 2017 10:18:40 -0600
Cc: FreeBSD Ports ML <freebsd-ports@freebsd.org>,
 cpm@FreeBSD.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <FEA32EF9-DAD3-4FAB-975D-67D785041951@adamw.org>
References: <6d826a0d-b54c-ef9d-88d3-bdf4f159c434@cloudzeeland.nl>
To: Jos Chrispijn <bsdports@cloudzeeland.nl>
X-Mailer: Apple Mail (2.3273)
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports/>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 30 Jun 2017 16:18:50 -0000

> On 30 Jun, 2017, at 10:04, Jos Chrispijn <bsdports@cloudzeeland.nl> =
wrote:
>=20
> Dear port maintainer,
>=20
> Just to let you know that I ran into the following vulenerability =
report:
>=20
> libgcrypt-1.7.7 is vulnerable:
> libgcrypt -- side-channel attack on RSA secret keys
> CVE: CVE-2017-7526
> =
WWW:https://vuxml.FreeBSD.org/freebsd/ed3bf433-5d92-11e7-aa14-e8e0b747a45a=
.html
>=20
> Could you send out a port update? Thanks in advance!
>=20
> Keep up the good work,
> Jos Chrispijn

Hi Jos,

See https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D220382

It's in the exp-run queue.

# Adam


--=20
Adam Weinberger
adamw@adamw.org
https://www.adamw.org