From nobody Thu May 19 18:52:38 2022 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 60E421AE7333 for ; Thu, 19 May 2022 18:52:49 +0000 (UTC) (envelope-from flo@smeets.xyz) Received: from mail-out.smeets.xyz (mail-out.smeets.xyz [88.99.165.53]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4L3zWN1J2tz4VdG; Thu, 19 May 2022 18:52:48 +0000 (UTC) (envelope-from flo@smeets.xyz) Received: from mail.smeets.xyz (mail.smeets.xyz [IPv6:2a01:4f8:10a:3543::25:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (Client did not present a certificate) by mail-out.smeets.xyz (Postfix) with ESMTPS id D1A8345179; Thu, 19 May 2022 20:52:40 +0200 (CEST) Received: from amavis.smeets.xyz (amavis.smeets.xyz [IPv6:2a01:4f8:10a:3543::aa:4]) by mail.smeets.xyz (Postfix) with ESMTP id C03D6B0594; Thu, 19 May 2022 20:52:40 +0200 (CEST) X-Virus-Scanned: amavisd-new at smeets.xyz Received: from mail.smeets.xyz ([IPv6:2a01:4f8:10a:3543::25:3]) by amavis.smeets.xyz (amavis.smeets.xyz [IPv6:2a01:4f8:10a:3543::aa:4]) (amavisd-new, port 10025) with ESMTP id auo-GS05FZsQ; Thu, 19 May 2022 20:52:40 +0200 (CEST) Received: from [IPV6:2003:cf:df2d:f43:d989:8968:3833:2143] (p20030006336e8143d989896838332143.dip0.t-ipconnect.de [IPv6:2003:6:336e:8143:d989:8968:3833:2143]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (Client did not present a certificate) by mail.smeets.xyz (Postfix) with ESMTPSA id C3CE0B0591; Thu, 19 May 2022 20:52:39 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smeets.xyz; s=dkim; t=1652986360; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=//hrHmSj1lSw12ypggmajbpX249m/nDArMQ0lIQRkOE=; b=sfRlfrGFcYBmgZg8ohFzZ2acRWdZ4D510abgCjMp9BRlt07RPVEndJvjLZ4CWjQk1FAWZF Fabz9fPmDuXcMyLBOwuSexsewHK2Nl+LF5M5vvBWj2ao4kw7DKgSkmJflz0V02IqaFYkFA 8KWB6RUEHGtkvCnusFoDkivRu8K0f6JUxY9z5ZcxAwxi6buv4yMKFgQxv4LMAYz+CyaYQP PK8e1VTbz1eY64WgRK8oiFZBNYjWSfE3OVp+uqUXI8e+6wLs0KwVA6B/nLtA0tQS7l1Qjl e52xX95zDnKJrBnplmUG3uYa0BG1LX1Ix5lpDmS7ovIXoUTBjOtOtilsIZOJIw== DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=smeets.xyz; s=ed25519_2022; t=1652986360; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=//hrHmSj1lSw12ypggmajbpX249m/nDArMQ0lIQRkOE=; b=yt6JZOdxiIaMDwuQUJ4C1bZoo2+ZI9hYvBP8YUoRgupvTozLWm/E92FMrvdxtawBplwBuA LXHwY0hMXLqYbQAQ== Message-ID: Date: Thu, 19 May 2022 20:52:38 +0200 List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Thunderbird/91.9.0 Content-Language: en-US To: Andrea Venturoli , yasu@FreeBSD.org Cc: ports@freebsd.org References: <9fafaa47-0695-389f-11a9-940ab26364fc@netfence.it> From: Florian Smeets Subject: Re: ClamAV security update In-Reply-To: <9fafaa47-0695-389f-11a9-940ab26364fc@netfence.it> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------y4fO403hpUN7qnKXMbALKaWT" X-Rspamd-Queue-Id: 4L3zWN1J2tz4VdG X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=smeets.xyz header.s=dkim header.b=sfRlfrGF; dkim=pass header.d=smeets.xyz header.s=ed25519_2022 header.b=yt6JZOdx; dmarc=pass (policy=reject) header.from=smeets.xyz; spf=pass (mx1.freebsd.org: domain of flo@smeets.xyz designates 88.99.165.53 as permitted sender) smtp.mailfrom=flo@smeets.xyz X-Spamd-Result: default: False [-4.90 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; HAS_ATTACHMENT(0.00)[]; MIME_BASE64_TEXT_BOGUS(1.00)[]; DKIM_TRACE(0.00)[smeets.xyz:+]; MIME_BASE64_TEXT(0.10)[]; DMARC_POLICY_ALLOW(-0.50)[smeets.xyz,reject]; NEURAL_HAM_SHORT(-1.00)[-0.998]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:+,4:~,5:~]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:24940, ipnet:88.99.0.0/16, country:DE]; MID_RHS_MATCH_FROM(0.00)[]; MIME_UNKNOWN(0.10)[application/pgp-keys]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; RCVD_COUNT_FIVE(0.00)[5]; FREEFALL_USER(0.00)[flo]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,multipart/mixed,text/plain]; R_DKIM_ALLOW(-0.20)[smeets.xyz:s=dkim,smeets.xyz:s=ed25519_2022]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MLMMJ_DEST(0.00)[ports] X-ThisMailContainsUnwantedMimeParts: N This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------y4fO403hpUN7qnKXMbALKaWT Content-Type: multipart/mixed; boundary="------------uV6rm7cTPQV9BJKwI3vLgtb0"; protected-headers="v1" From: Florian Smeets To: Andrea Venturoli , yasu@FreeBSD.org Cc: ports@freebsd.org Message-ID: Subject: Re: ClamAV security update References: <9fafaa47-0695-389f-11a9-940ab26364fc@netfence.it> In-Reply-To: <9fafaa47-0695-389f-11a9-940ab26364fc@netfence.it> --------------uV6rm7cTPQV9BJKwI3vLgtb0 Content-Type: multipart/mixed; boundary="------------5SBImrTOhKDS0pYlkYwhp2No" --------------5SBImrTOhKDS0pYlkYwhp2No Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gMTkuMDUuMjIgMDk6MzAsIEFuZHJlYSBWZW50dXJvbGkgd3JvdGU6DQo+IA0KPiBIZWxs by4NCj4gDQo+IEkgc2VlIENsYW1hdiAwLjEwNS4wLCAwLjEwNC4zIGFuZCAwLjEwMy42IHdl cmUgcmVsZWFzZWQgb24gTWF5IDV0aCwgdGhlIA0KPiBsYXR0ZXIgdHdvIGNsb3NpbmcgInNl dmVyYWwgQ1ZFIGZpeGVzIi4NCj4gDQo+IEhvd2V2ZXIsIHRoZSBwb3J0IHdhcyBub3QgdXBk YXRlZCBhbmQgbm90IGV2ZW4gcG9ydGF1ZGl0IGVudHJpZXMgd2VyZSANCj4gYWRkZWQuDQo+ IA0KPiBXYXMgdGhpcyBvdmVybG9va2VkPw0KPiBBcmUgdGhlIEZyZWVCU0QgcG9ydHMgc29t ZWhvdyBub3QgYWZmZWN0ZWQ/DQo+IA0KDQpJIGNyZWF0ZWQgYSBwYXRjaCBhbmQgUFIgYSB3 ZWVrIGFnby4gSSB3YXMgd2FpdGluZyBmb3IgdGhlIG1haW50YWluZXIgDQp0aW1lb3V0LiBB ZnRlciBkaXNjdXNzaW5nIHdpdGggYmFwdCBJIHdlbnQgYWhlYWQgYW5kIGNvbW1pdHRlZCB0 aGUgDQp1cGRhdGUgd2l0aG91dCBhcHByb3ZhbCBvZiB0aGUgbWFpbnRhaW5lci4NCg0KSU1I Tywgc2VjdXJpdHkgZml4ZXMgc2hvdWxkIGJlIHNwZWNpZmljYWxseSBtZW50aW9uZWQgaW4g dGhlIGJsYW5rZXQgDQpzZWN0aW9uLg0KDQpGbG9yaWFuDQo= --------------5SBImrTOhKDS0pYlkYwhp2No Content-Type: application/pgp-keys; name="OpenPGP_0xEF5BA4DCD5A9F3C0.asc" Content-Disposition: attachment; filename="OpenPGP_0xEF5BA4DCD5A9F3C0.asc" Content-Description: OpenPGP public key Content-Transfer-Encoding: quoted-printable -----BEGIN PGP PUBLIC KEY BLOCK----- xsFNBFpyBwsBEADLq0c46orEtbMn4SptX+VJxR1wB4YwaErZme1bqF4nZHIhlRNE T22HsHdQdoagaB4uACq0Rj5kHcu614ZnnNkLPyCxWQATx+cbdiFO4/hfT8tAvKnB tiy3awKJ5uGCNO2EzJwXW6KwdDA8XPRySqN8m1yPl+dW0Cls+/vO/QL/6+YLMupm EpSvFxRzAZTQuKyX4+xl+dYId24JiPd1yfCuDNOY3+OZ3QBMT00u/699N8lUWRti TwaQMwAOww8r/26YM6/SgcgFuLH2E/CVplY0sDvfoISlAj8agxdomNXfPjCMQ6w5 yGZmA+huFpPCVBTi3on/SWgbQO7dLVpN4BNPuScPosCb/dsOg0S74zCClsIU3gdU Gh9rwJY00/Ebid6V0R3c1Czwbg8LQedzlGDuXYXmzp6W2ujgr1cqbUD6lUWikUv2 IMdCbb8MxYhHLi3GYUs5Xpi+W7vM6T45KbuMr7O/1SjtcGOlNeDvGNgjcDk20fOg PPZ+M6i9vX5Q2oI9HoYaeTiYNwILkBLVP/L40kTo5EkiQOt4OW6BMbylqXPOaQMW uGVbmhCJQpbx8Vo80s2yiBBVWkLkWQIcIm3KZlLldJqKEFpQBWLBE1eFFqboYgAW zFn73CaV5tihobijMmmOV3a8cI1fI4kREyl3g+8bW+O0u3m3tuzVOpDpjwARAQAB zSBGbG9yaWFuIFNtZWV0cyA8ZmxvQEZyZWVCU0Qub3JnPsLBlAQTAQoAPhYhBOyz aLh5CL+2kU1yae9bpNzVqfPABQJh8E3MAhsDBQkLM37BBQsJCAcDBRUKCQgLBRYD AgEAAh4BAheAAAoJEO9bpNzVqfPAOjQP/1FdgHTug7m1OGP3kz5xOID6cuSDUZ1Q eFNvGOU/g0qty1Bda9/dcRJjOdbtIkpPXPUbOZiZWFLABBo82lxufjso1uzwlvCZ q/qMYMtpTys8LZUVOrbVeUM8KKLHtLq2DL49Et8DqwENcxaPa604RExsfvrBAMwO WF6kH8DC4cbCi+2B335NUCFoM/qYC3Ph0bCrWu0lsiEd0G3WJ8Wz8OiEgD+muoQt aEMKkg6B97TaCvcLf25j6VO0bTiySM3e1RwNPaTyu9GSh5L7PThPE67HuA27NXoh +oHDVbdM475OGIQ8IAWvuPyEJ6R91IjpQFR3qiyWeppR1Ag5XoB1DpQv8fKu2bQz m7lQWC07djntw+ScxcDxiuj7+PL1ClKKjezTSmvjJEA6G3wB17MtSnI8TMVnPR1N GsShTY5Fl5ihyQw1wg2eJLXJg0rYLubhPhJiyoiGOIk1BR340Aben1qDC33V9Qo5 CKFlXizvFygdy3h/aIJeq9m2uQvQpPkMM4Ije2tmvlK+Q3HJki0OnbeGf4vJa/dB VdnjAp7idYaVyKhV4D3daH1zOTWwxLrSHOv5ixpR+ZCmG6nmApEKE2q5lm/bx5ZA XP9SSwyLdV22PUbuiNGZ5eJx/9lhuX16nVZ3F2xJZnJuqQV7kWxAedxwaN5P5U8K TPFPgLRAD9U0zR9GbG9yaWFuIFNtZWV0cyA8ZmxvQHNtZWV0cy54eXo+wsGXBBMB CgBBAhsDBQkLM37BBQsJCAcDBRUKCQgLBRYDAgEAAh4BAheAFiEE7LNouHkIv7aR TXJp71uk3NWp88AFAmHwTcwCGQEACgkQ71uk3NWp88BpTRAAybyHhteWLV4VDlzl 7NPxbN8c9cDDv1r0HlaUVxfrSw+1rzycEdhqA8o75Wh5II4KAFTbX2igGckskcoO dqm68MU8+zAtVxVZaqX+EGNXSLWZgAzlf9rAHDm/O1ZBShZhn9EJyarYPaSRNBev VaR9bY6LEFmDacb6qnRVOH4Z/6O6fq/IxoXQqyV1NDmmObxtCcxwx71v+7mJoBMT ximtdrPmcpGesCQquiWKa6DyYjZIEZ9gQPttLQ+iYmwWJp6q68VULqY9X0zG7byc 3Xe7W/5oEoTA/gSWG0EbPOdfTS77TTNxhgBzFB6VY81PVAYzH419Q0b055XLTupo +JTQUb6bbluH6UJIBtIp1iJlGN42qvkMwqTogIdat/3aA+EWEfG7iWlx8Z1hFU3r 7GMJ5o8QLsloVNWAda+iHaidIJvU1fJa0U9v2r1d/KwYHj2qlMaQMZHjldULp7LP P/pITeQEnma3mZ6IX7cp6mUd8MOiVTPE42fPs8qBHKfuEcg7L07NcdRzzgS0LGQf v6fbnvNnvsDGAt4zGQ/Hj72Z5/eL1sDnoJQUHNHMJlNJieGplbLm3LacNQZa9979 BjwK+mUr1nPaaP4YR3czfVwTMrxPKT9kFBDZL4YQ8LbsH5JJC3As3EJdptIkANSm +hU54sG8QPz6TDsm7754d1n12M3CwXkEEwEKACMWIQSnAQMgO8q0Spj+yETnBT35 /4bwdgUCWnIHOAWDB4YfgAAKCRDnBT35/4bwdmNtEACU20uv5Lvuit3DtzQ5m4eP HAQzdeg6Uqpm7nNHB0KKGPCtKmf55bDVHfVuKS1pu1jBXFxGKyEKY5+QaxVrt9Dl iDqfqEPDmIqDdG13ch0cV3lan+3Jli3M2OwsHNac72MPFp++eAUbA9wgn6y6GlJx 9/oCtDuY9FucpL/P8zMbH5f00qBEKsC+lq8u+ZY/7lPYdVaZl3doLZcGCCsgbLP/ ytJPc7qzbHrW1wa7kBFKPLUhAbDFWTQz8L8Zt3cCDoqCc3N0rLZ419LA3NgROek9 nXuti9RG0AofI6t8tMKFBJs1oE9jbs1iqWzG0HdI25U/I0euAUwJNlkVBDwQIOgw HzLYqdnmVJD9HWxMv0cKNY9xVZEnCem1JJaK/+9nrbUtOOvp7l7PWRSbePWYQRT3 KCDZuhl0I7A1qWX+SU28cuxRkxsVni6wvUKEkuxpT07A6XhMmLtGOJSpTDR/hsky gBCs1YSdDJe0NZleaBJ5LIJ30/p68qIm1cFFRLm1hi3bwuBiHq3/SYVTdUWAR/Kl 4xscL8o9f3A7J/npOU126Zn63ItMguHWrangJdTUUINUlF0wleTmZYpTP5+ck7gc Br05VZGWXyNTMYChzS0oQXHCZYdAV9YghRhj2PWKLGhmB8Z+1vo49o1AmGFswlZe TGwUZ2r3d7pZUF0N9zOkbs7BTQRacgcLARAA0es6bm/J0r+KPXOQPItnNuiCTnOM yHqgCvdwfigZskc8uXIVlMJUFhTAPiSHo1XWwq5k55f9rKDJWDVHIu6WfOxzpiNc 4jGWqGpDAYjyTyywAikxJ/Tb3vzUI0XYcLjYKsl4e1c040M06Owy6jHOBr3MtAKH iMtOUT9NQmjopUAFYFVG1NWHZnvukq03uPY08UEe+nsrRYd9X5NieWyCOFQDQAJm dR0dLZhHMGELPNB6W53EHPnhL3FtSrWZ9l9XHwBsAZcXbPGjrye+8AAmfjweIFLd 0yEIZgkN1l2NrpB1QU+J6aKc7HCRTMKqYrGb4CPtRK57VJtlmonGYwjV4Xg6uT8E kkjvhn8WcmBhHhSQSIPcn8pShxAIgfd1oHX78JeWH30hvsA/5Aa4qTe+c0eHtUGr cT5UCIzktTQGaBb5x1E8eSLAzuwNrZWdXdWq9XtCagwqccXNQHo2fy4T6JqSnknz U+vryQM6ruQtbdScaaDU9SpuycJpOKYlvckBhbM5b/0Jhw+VsB0iqL7Afsw6h4v4 8D30DeRb/zzWsaZ45gXPOuw1Uu15r4Al9e2ngs3mA5Ug8imi8I1JVdcQqCXtri+N QbNUHOsfs/NP6ThdQRDA0IAJ8ZnEQTG2fLX1uO+6ZnSu/4AQAe+xZIpcdRUnMg2O p31SKhoRsoYA+U8AEQEAAcLBhgQYAQoAJhYhBOyzaLh5CL+2kU1yae9bpNzVqfPA BQJh8E3NAhsMBQkLM37BABQJEO9bpNzVqfPACRDvW6Tc1anzwPfkD/4yF78b+PSP mDiAsOffMd+U53MhT1Rem+PWxChsn4VqMtLArcr+vxqYcTrZNtb5bsYQgDMz47Zl L1N67PWfe129btyTkOSzA56o0eSfl4mhGhnGQRYczxAHw2bN4JtCwZW7kwhqcGG3 nglWVG9O9GPerSl4c1PB5EYGUjNCL5mn7/kTwSxoNMjOhEsQS+HgjLoRHi7+jNQu VW5hY53wrkTH7itAZohHxYd+zifPciQyUQw4P0hWe0XSVcwJN+xz81NhA5X0L6jl sy9G8xQmx8k37BOTKAqatPIesSlk4lzTNuVXmnbrIGGsvzYO46sMZiT+EPnmcf3Y Aq6mMNidmlWoVyOBKnclLzmEj/gFceIVrGCPGtG9pEdXAbpnSnYZcet++HCS1bRH YMnrPxB7E+1Xy6GVvylfahIcsXMt1mpI0FKzuJcH8O4Asv+QsKY6Q4tcjSX0CROH EnGO9lIaNOA7nYXP5hsuyIjHkPRZ/VgrwD+/z9PUKszqyDBIpwf4Rk9Cmg8z2+TP xnooLMBnTAQPNYIiI9fMyWOHtfPkLIiGUtGBHb7LAQZ7Pxsi5fR36+crhwJiQhpM brthm4VE2pwKnMlohLXnxQtoMMfTw9jzCpTjwuEEFYIIEte8X5GyXItfAm4b9z77 5PDS0JZbUcHZ1sv65OP599IaYgf3rzJnIw=3D=3D =3DYr0r -----END PGP PUBLIC KEY BLOCK----- --------------5SBImrTOhKDS0pYlkYwhp2No-- --------------uV6rm7cTPQV9BJKwI3vLgtb0-- --------------y4fO403hpUN7qnKXMbALKaWT Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEE7LNouHkIv7aRTXJp71uk3NWp88AFAmKGkfYFAwAAAAAACgkQ71uk3NWp88Ba nRAAtmkxtBJHX5O/4ZpfWMVyh8Mvv6SRQbTvYUxGBNtVItb8YvNCkMchxHfklp6FmyoxAN+l/8BZ G+G1FK8vHTJTvdot8heu+QERq0+V2vWMja1QujjoDRmrOCh2ZJdXxJ9Ik1d4xWhUvocXOulaT/36 zvpN2Vc5fAom159XgqUg6eg5UPb6M4CDPgxUwfS3l///ODwAtIG1PVUndDwV5vrhatVmPH6J9Uge Mf8XgxIwiyd7ZsByOP1hqAMrapZNgj0PtLE5S/JnNDBvx6comApgwPCB+CAUnav+eh6rI19Fi06h h9OxMqetVlzbwbjFjO35fq6s86FcyhIJ4fp+6+CD8+Xl5EwOaxRYCcEyr4eCjPFubl46C5y8+iNY IhlQLWsu7DJ+1MNDxADKSPORssjr8dF4OqUEB/WOmB2+6TznhFBAhMcDKbfN6rBHuxDDHG8SavyV xrWZiJYWsKMHYllok2eGw7OZQhaX7X4PiuCsKrOZcypT4oPRddRyPTLC4Hy3gX2NEK7iYyBdFacg C4MZr9Xv1ykwMiyUi1+ar6PwxnkZoSB3jStKmFoqcMivj5hRwg5VUzRlDdrrQQp9Kh4ZH3z85Ehb a6jPiokbHFemYtfXA1o6BCs+ZvN01Uvi3tWR+aQo+Gz9MqpzDMxEpZ9tm3t75MbLRDa0EKQL7dc6 Tl8= =JMaW -----END PGP SIGNATURE----- --------------y4fO403hpUN7qnKXMbALKaWT--