From owner-svn-ports-all@freebsd.org Sun Nov 18 09:53:22 2018 Return-Path: Delivered-To: svn-ports-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 770451132BE2; Sun, 18 Nov 2018 09:53:22 +0000 (UTC) (envelope-from idefix@fechner.net) Received: from anny.lostinspace.de (anny.lostinspace.de [IPv6:2001:608:a02::33]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 8A8C474A7D; Sun, 18 Nov 2018 09:53:21 +0000 (UTC) (envelope-from idefix@fechner.net) Received: from server.idefix.lan (220-130-067-156.ip-addr.inexio.net [156.67.130.220]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: idefix@fechner.net) by anny.lostinspace.de (Postfix) with ESMTPSA id 0DE9DAA65; Sun, 18 Nov 2018 10:53:19 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=fechner.net; s=default; t=1542534799; bh=GqG5vM0lzgajiHFJyjLOy1xo0FCQMPxnSnWEfAMUL9s=; h=Subject:To:References:From:Date:In-Reply-To; b=DBLwkMCdnxF2mRoiY3guB3RRsQ4/+peWSA/k27HovNAAXzMucI4NkXTHtuhHHAIsp DMJBBJcLigAjY5USB+2fmV8ehc+65QJyLW3mIR3BlSKBivHb6VsEdNr6xjjWMCVWiu tjTqEhY4ae7XVCRVOA1jVZu+8IMDS/eidS2wt6Cg= Received: from [192.168.0.87] (220-130-067-156.ip-addr.inexio.net [156.67.130.220]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by server.idefix.lan (Postfix) with ESMTPSA id 95CAB2DC7FE; Sun, 18 Nov 2018 10:53:17 +0100 (CET) Subject: Re: svn commit: r485174 - head/devel/rubygem-warden To: Sunpoet Po-Chuan Hsieh , ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org References: <201811171734.wAHHYZSG071135@repo.freebsd.org> From: Matthias Fechner Openpgp: preference=signencrypt Autocrypt: addr=idefix@fechner.net; prefer-encrypt=mutual; keydata= xsFNBFqca1YBEADM9mF2+ifk8HILTlf5wtAzV6SYVR4RvNOo/8Kucw4sCZT76zS1fjZe4Zy1 3C0IZ07Wi+3PnoGIgOCsXp3PrTc2nuHQWkwVBYXy8UaR9DHBWA/mIvRGG1ZscKQYA6oUdCvd K8Mu26zO60yTt+ONzFtK6G1myH4EHXZ8dpmdCFf+W3rzTU+aCQ5S3OfwCLGgYgOaVREGkdOc 5SVCpFb4n+2B8+CqeWsRHhnT+4h7/YhgDMGp4GiI3yrB2nBVSUUvcosD2nRtJQgGQHcAFtMq 3hJaKPOR/mHc6KVrp0xmGNmdtazvXloHmGIl9O1UpmMmrYu9Kugl0JkGi2fAcno02XgVlkyX 7xDLTteP5cNqRxor4yVDaRWUQnOfK9XgcrKGrAzb65BkCSkjT+Aw3S/A8Qd6NvjL9qy1d+Ct dzatOVF/Y7jaW28CMr3jvwPS13OxV7PnJzIZzdik20eVxfOXuYfxZD+PwBaGgFF0qj6zKACC aKLalE0ZpY0zNn/iPyQX/Cf9KoDyFpOHSsEswiJ5rCWwppVcsFyogHOemVmeaXlvyDPEipnV ZUkpGP/CCqPu3eD0uDzP7UJ0pt/l/JfW0Xw/4p9mjB024xiRlxLa6vSRfGl//EdtAIbKKa8x 5wsKTQEbYJDmXE3tH/A54DCqRXhcopTlu2iJlTdnIMltn9afVwARAQABzSVNYXR0aGlhcyBG ZWNobmVyIDxpZGVmaXhAZmVjaG5lci5uZXQ+wsGXBBMBCgBBAhsDBQkJZgGABQsJCAcDBRUK CQgLBRYDAgEAAh4BAheAFiEEaWB64mCp804YOtqutot13J/XR+EFAlqcc9gCGQEACgkQtot1 3J/XR+GQyhAAwDxUSg7X2aS1d6rrYUZdDk8rT5TCjayDAyOATdAUhJRZk8qXRNF27Mu6xiOT mIvEMKLagNsitffZs1g/mulRQiDVLloGav7xozSfYlaOYWpPb55wpsugQPLZz0OkU9tzw7j7 7sPPvnAxeqSofUJzQdZzp43aVwXVqsJ3rY0jGzYA5RLS6CBI1RRR8/hHLMxspDPl79IW3GhI HAXaVX1HVJA2oJEo9Y95DnJwX8NV+hvLlUVA2KDdNKFiVJKeV3ccqw+/5zW3Y8J6Rd8blW9n p68Z7lyxt6mvsDEdSxOyGSkPagzIDfHqmDfkaeum7gHMwweH2e2pZuhzMZkrKNoSkKiJ5uim 638ZhnzzmEWh2qtYPgHlZG1jO6n2DSzCqJkQYjYUtLj7ylIgZakG8M3idQRugHImMBq+HSMu WR8FI52gh1+4LbIArHB4YWTTr933ElwhS1jtomK9SeWezPfjunpxqXQl4QR0qXAuglsOMJ6y Togb6lc0qyEdOa5VCXQTLSD9yZpolSQOjOe1XEyM4g5v7FrPBGVni9AxlARvUDVbYQDv1+4A gchtgpLmAF8mDPq/tGeXuAO3m+ExQDXpJ4CneI9YHc+joU2cXQi5MP1NzgMOV43XEZCiTW0O BWM1+857gmDqGbybE7F3UFpvBs9/NRWnuxoKaYxYbqCOc3nOwU0EWpxrVgEQAN3uCLHZF+1V gcrzYjwL1wAJwjYb7UnHKvNYdaBKgW0n0NTfaTCLHxHYPO8NlV1+lNctSeXLeiWpmE1lCDHq /++53EJ34OsRd/n246PdtfIfltML73tsmq6S9zTye2zv7LsmE7jgUBaasbv0qSLSybOUvkRx j3xBuK9Ymg/ZXaENOhxwIQ6oQoNLg3ers9t5Xl4NVK6gzzZ2OdTGnuUVhQmi4rbP04R0GJFh AtGLAYUCxlXVZhdPAs4qZaoAEP5nW/u2MyzSaIouwcEIdttAiPZdrJr+a4OGKz88Sn6zqKSa uyUADgX+G8tKUONgZbfz4SSRvlinOgyU2RyyfNS977r/YfaHH+oAxg31yUWPtD/ryfVw69bG vK8RQrZ9+c1vyWBABoQOh5+JHW/AE9Xj5dQatEfWmGO3+/FRo2TIhqZQXXl8PW+jtEjkhgOH OUX5ERzSm6nCcPIw+LUkEINcLc9bw4fv1eOWIdBuCckGM4rWXkLYbqhdSzdWeCsC0tiQk8x7 O1zXRJOKF4rITJd/qX322EH29BR+T9V1Hw7LDSRe+3YxtoXhROZRXjF8QniEHeKVNRUComr6 rWGmuHjsNTQ7twtwnG8xSOfCkYAp9GrbzBkIYX+VFvFQLqVM+It3RAlge/bwpZPvkr3bFsJk 4JS+EAugBIrP0xd9BMOh6Ej5ABEBAAHCwXwEGAEKACYWIQRpYHriYKnzThg62q62i3Xcn9dH 4QUCWpxrVgIbDAUJCWYBgAAKCRC2i3Xcn9dH4ZZsEACoQI109htphVe2AQhJ7wuPo8pIrSFA 0Mb0pfibX/sYw8ZZz/x3ctTI3Ajq2baSaoebIuUyd6oPI7cAzgL4s2zHiZ3ChH2dDxJlOPfk OaiK124DJMPqWiWuxe39tgq23tsPhwcvF+DC+SkJoLWKCYNC06fS3bLktZ0s4lVE5tqfL5ww MvxgxB+6+sWHwZWSv1IwB/geov6zkEhVdkXqrGPE52LyLfU0ACMmihcl0/npsCMZSls0urge CsPMuHPQnmcM2ERbere8i9OdKQDzGBrTbWl9DxNRf4o+cAYirEJM3Kc+ZD2SE34bTSvg3kdQ QZQbj+o+BRcsR0LaGbORkNaMZlp5OuXteL6nG7sbAPn0bjUUlup8CJEXDXENG6LJG1/oVWFq m3OtPyr5UoMQAuhuGx0/Om6AXKr/mk+veuoKWMXkqll045/bYE7bX2A0gkyGE5DdjaiHPmS9 NsWuKDeExLlXZOL1GX+PKjWLADwlv07XHB8Hf6U0/lpf3/mggRtqHyKbHt0iRqYaMC95gVdM rbugxh61U/zxIaweU7VolD5cRrltxqPp5szOwDzw42JYwbpYsXFJXNkuCGCmK1LHcShfEggt fV3g/JKzvNRQn6p1f0frppl/eZ5UvWVKrNERJzcZgkOecxwiK/L/JoGpGfWOqWGsTxe/AnQc Xxj8Dw== Message-ID: Date: Sun, 18 Nov 2018 10:53:14 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.3.0 MIME-Version: 1.0 In-Reply-To: <201811171734.wAHHYZSG071135@repo.freebsd.org> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: de-DE X-Rspamd-Queue-Id: 8A8C474A7D X-Spamd-Result: default: False [-1.57 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[fechner.net]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; R_SPF_ALLOW(-0.20)[+a]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[fechner.net]; RCVD_DKIM_ARC_DNSWL_MED(-0.50)[]; TO_DN_SOME(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; RCVD_IN_DNSWL_MED(-0.20)[3.3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.a.0.8.0.6.0.1.0.0.2.list.dnswl.org : 127.0.6.2]; DKIM_TRACE(0.00)[fechner.net:+]; MX_GOOD(-0.01)[mail.fechner.net]; NEURAL_HAM_SHORT(-0.25)[-0.252,0]; FROM_EQ_ENVFROM(0.00)[]; IP_SCORE(-0.11)[asn: 5539(-0.53), country: DE(-0.01)]; ASN(0.00)[asn:5539, ipnet:2001:608::/32, country:DE]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_TLS_ALL(0.00)[] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Nov 2018 09:53:22 -0000 Am 17.11.2018 um 18:34 schrieb Sunpoet Po-Chuan Hsieh: > -PORTVERSION= 1.2.7 > +PORTVERSION= 1.2.8 > CATEGORIES= devel rubygems > MASTER_SITES= RG > > @@ -12,10 +12,11 @@ COMMENT= Rack middleware that provides authentication > LICENSE= MIT > LICENSE_FILE= ${WRKSRC}/LICENSE > > -RUN_DEPENDS= rubygem-rack>=1.0:www/rubygem-rack > +RUN_DEPENDS= rubygem-rack>=2.0.6:www/rubygem-rack could someone please help to understand why this upgrade has broken www/gitlab-ce? I do not really understand it, but I do not want to downgrade this port, as there a CVE is related to: https://github.com/wardencommunity/warden/releases/tag/v1.2.8 I see the following error: https://pkg.fechner.net/data/112amd64-gitlab/2018-11-18_10h44m24s/logs/errors/gitlab-ce-11.4.5.log If I downgrade rubygem-warden again to 1.2.7 it solves the problem. Thanks. Gruß Matthias -- "Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the universe trying to produce bigger and better idiots. So far, the universe is winning." -- Rich Cook