From owner-freebsd-ports@freebsd.org Sun Feb 2 20:50:54 2020 Return-Path: Delivered-To: freebsd-ports@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id C5B8A23978C for ; Sun, 2 Feb 2020 20:50:54 +0000 (UTC) (envelope-from cmt@burggraben.net) Received: from smtp.burggraben.net (smtp.burggraben.net [88.198.69.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.burggraben.net", Issuer "Christoph Moench-Tegeder" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 489jlx6HFjz4dYb for ; Sun, 2 Feb 2020 20:50:53 +0000 (UTC) (envelope-from cmt@burggraben.net) Received: from squirrel.exwg.net (unknown [212.76.253.171]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "squirrel.exwg.net", Issuer "Christoph Moench-Tegeder" (verified OK)) by smtp.burggraben.net (Postfix) with ESMTPS id D4522C00316; Sun, 2 Feb 2020 21:50:51 +0100 (CET) Received: by squirrel.exwg.net (Postfix, from userid 1000) id 761BF2B301; Sun, 2 Feb 2020 21:50:51 +0100 (CET) Date: Sun, 2 Feb 2020 21:50:51 +0100 From: Christoph Moench-Tegeder To: Peter Jeremy Cc: ajtiM , freebsd-ports@freebsd.org, Thomas Dickey Subject: Re: xterm-353 Message-ID: <20200202205050.GA2182@squirrel.exwg.net> References: <20200202103600.1959de17@dismail.de> <20200202154227.GB1309@albert.catwhisker.org> <20200202121118.71446c54@dismail.de> <20200202123845.46fc2d8b@dismail.de> <20200202185446.GB60645@server.rulingia.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20200202185446.GB60645@server.rulingia.com> User-Agent: Mutt/1.10.1 (2018-07-13) X-Rspamd-Queue-Id: 489jlx6HFjz4dYb X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of cmt@burggraben.net designates 88.198.69.140 as permitted sender) smtp.mailfrom=cmt@burggraben.net X-Spamd-Result: default: False [-4.00 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-0.999,0]; RCPT_COUNT_THREE(0.00)[4]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:88.198.69.140]; FROM_HAS_DN(0.00)[]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[burggraben.net]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_MED(-0.20)[140.69.198.88.list.dnswl.org : 127.0.6.2]; IP_SCORE(-1.50)[ip: (-9.74), ipnet: 88.198.0.0/16(3.78), asn: 24940(-1.55), country: DE(-0.02)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:24940, ipnet:88.198.0.0/16, country:DE]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[] X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 02 Feb 2020 20:50:54 -0000 Thomas, care to check the latest xterm tar file on the mirror? ## Peter Jeremy (peter@rulingia.com): > If you are inclined, you could compare the contents of both files and > report the differences upstream - particularly if there has been a > malicious change. In fact, https://invisible-mirror.net/archives/xterm/xterm-353.tgz is ftp://ftp.invisible-island.net/xterm/xterm-353.tgz gzipped once over again. The file from the mirror fails the GPG signature check and has sha256 0ef2e2fdfade2dfba41f7babeb1066886fd3c8c6aa6dd057fbce3d59a8848aa6 and can be gunzipped to reveal a tgz file with sha256 e521d3ee9def61f5d5c911afc74dd5c3a56ce147c7071c74023ea24cac9bb768 - that file can be verified with the GPG signature and matches the sha256sum the ports tree expects. (In fact, the file from the mirror can't even be "tar xzf"ed, as it's not a tar inside a gz but a tar inside a gz inside a gz). Regards, Christoph -- Spare Space.