From owner-freebsd-ports@freebsd.org  Tue Jul 24 06:23:01 2018
Return-Path: <owner-freebsd-ports@freebsd.org>
Delivered-To: freebsd-ports@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 83BB21041C14
 for <freebsd-ports@mailman.ysv.freebsd.org>;
 Tue, 24 Jul 2018 06:23:01 +0000 (UTC)
 (envelope-from franco@lastsummer.de)
Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org
 [IPv6:2001:1900:2254:206a::50:5])
 by mx1.freebsd.org (Postfix) with ESMTP id 1A3D381B6A
 for <freebsd-ports@freebsd.org>; Tue, 24 Jul 2018 06:23:01 +0000 (UTC)
 (envelope-from franco@lastsummer.de)
Received: by mailman.ysv.freebsd.org (Postfix)
 id CD85C1041C0F; Tue, 24 Jul 2018 06:23:00 +0000 (UTC)
Delivered-To: ports@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id BA8F91041C0E;
 Tue, 24 Jul 2018 06:23:00 +0000 (UTC)
 (envelope-from franco@lastsummer.de)
Received: from host64.shmhost.net (host64.shmhost.net
 [IPv6:2a01:4f8:a0:51d7::103:2])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 5ABAD81B66;
 Tue, 24 Jul 2018 06:23:00 +0000 (UTC)
 (envelope-from franco@lastsummer.de)
Received: from [IPv6:2001:470:25:233:6dff:3342:5dce:ac92] (unknown
 [IPv6:2001:470:25:233:6dff:3342:5dce:ac92])
 by host64.shmhost.net (Postfix) with ESMTPSA id 41ZSw25w9GzC1LZ;
 Tue, 24 Jul 2018 08:22:58 +0200 (CEST)
Content-Type: text/plain;
	charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 11.4 \(3445.8.2\))
Subject: Re: LibreSSL CVE-2018-0732 correction
From: Franco Fichtner <franco@lastsummer.de>
In-Reply-To: <20180723192914.elydx54y6w6q22ic@atuin.in.mat.cc>
Date: Tue, 24 Jul 2018 08:22:57 +0200
Cc: FreeBSD Ports <ports@freebsd.org>, ports-secteam@FreeBSD.org,
 brnrd@FreeBSD.org
Content-Transfer-Encoding: 7bit
Message-Id: <77BD2B66-E8BD-4AF3-8EA7-23A7C49890E5@lastsummer.de>
References: <9FACEB69-15B0-4022-8F0B-EE1FD801DBB3@lastsummer.de>
 <20180723192914.elydx54y6w6q22ic@atuin.in.mat.cc>
To: Mathieu Arnold <mat@FreeBSD.org>
X-Mailer: Apple Mail (2.3445.8.2)
X-Virus-Scanned: clamav-milter 0.100.0 at host64.shmhost.net
X-Virus-Status: Clean
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports/>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Jul 2018 06:23:01 -0000


> On 23. Jul 2018, at 9:29 PM, Mathieu Arnold <mat@FreeBSD.org> wrote:
> 
> On Mon, Jul 23, 2018 at 09:14:48PM +0200, Franco Fichtner wrote:
>> Hi,
>> 
>> What's the policy for picking these up?  Is there the same
>> kind of maintainer timeout at play here?  Feedback welcome.
>> 
>> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229037
> 
> security/vuxml is maintained by ports-secteam@, so it's their turf.  Or
> the maintainer of the offending port, or the person who did the first
> commit to vuln.xml file about this entry.
> In any way, the vuln.xml file is open to anyone to commit, so anyone can
> do it.

Great, so who will do it?


Cheers,
Franco