From nobody Thu May 19 07:30:02 2022 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 7B3C51B3A2D7 for ; Thu, 19 May 2022 07:30:12 +0000 (UTC) (envelope-from ml@netfence.it) Received: from soth.netfence.it (mailserver.netfence.it [78.134.96.152]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "mailserver.netfence.it", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4L3hMl3hn5z4hJj; Thu, 19 May 2022 07:30:11 +0000 (UTC) (envelope-from ml@netfence.it) Received: from [10.1.2.18] (alamar.local.netfence.it [10.1.2.18]) (authenticated bits=0) by soth.netfence.it (8.17.1/8.17.1) with ESMTPSA id 24J7U2dr008469 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NO); Thu, 19 May 2022 09:30:03 +0200 (CEST) (envelope-from ml@netfence.it) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netfence.it; s=202203; t=1652945403; bh=UP8lo8EjDawsrFhDeUOAB/Nt08mgdken9bBGV4AwqdY=; h=Date:To:Cc:From:Subject; b=gzJXEtokDdmlERiuMCkYs8BcUhc4+knc/FzUD1nP3FqN6Z3DM5a4HyqQudXMEogW7 DyHkekE66iz3zRNkCEPwzLvEQriF2rLDDj2e3JPO/fqB2qxHOhvNZT9fNPazYOG5dH a/vEcC7mMGP/Op3Hye3ICIVtydCHHfdQckjuUxno= X-Authentication-Warning: soth.netfence.it: Host alamar.local.netfence.it [10.1.2.18] claimed to be [10.1.2.18] Message-ID: <9fafaa47-0695-389f-11a9-940ab26364fc@netfence.it> Date: Thu, 19 May 2022 09:30:02 +0200 List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:91.0) Gecko/20100101 Thunderbird/91.9.0 Content-Language: en-US To: yasu@FreeBSD.org Cc: ports@freebsd.org From: Andrea Venturoli Subject: ClamAV security update Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4L3hMl3hn5z4hJj X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=netfence.it header.s=202203 header.b=gzJXEtok; dmarc=pass (policy=none) header.from=netfence.it; spf=pass (mx1.freebsd.org: domain of ml@netfence.it designates 78.134.96.152 as permitted sender) smtp.mailfrom=ml@netfence.it X-Spamd-Result: default: False [-3.98 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[netfence.it:s=202203]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:78.134.96.152]; MIME_GOOD(-0.10)[text/plain]; HAS_XAW(0.00)[]; TO_DN_NONE(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; DKIM_TRACE(0.00)[netfence.it:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[netfence.it,none]; NEURAL_HAM_SHORT(-0.98)[-0.978]; MLMMJ_DEST(0.00)[ports]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:35612, ipnet:78.134.0.0/17, country:IT]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[] X-ThisMailContainsUnwantedMimeParts: N Hello. I see Clamav 0.105.0, 0.104.3 and 0.103.6 were released on May 5th, the latter two closing "several CVE fixes". However, the port was not updated and not even portaudit entries were added. Was this overlooked? Are the FreeBSD ports somehow not affected? Thanks in advance. bye av.