From nobody Sat Aug 17 07:50:11 2024 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Wm9z31J3Sz5SW4p; Sat, 17 Aug 2024 07:51:11 +0000 (UTC) (envelope-from Alexander@Leidinger.net) Received: from mailgate.Leidinger.net (bastille.leidinger.net [89.238.82.207]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature ECDSA (P-256) client-digest SHA256) (Client CN "mailgate.leidinger.net", Issuer "E5" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Wm9z25NYHz4DVk; Sat, 17 Aug 2024 07:51:10 +0000 (UTC) (envelope-from Alexander@Leidinger.net) Authentication-Results: mx1.freebsd.org; none List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-main@freebsd.org Sender: owner-dev-commits-ports-main@FreeBSD.org MIME-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=leidinger.net; s=outgoing-alex; t=1723881061; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=kC4Ht7iVzHLH1lD6DHBUvJWCq7JNAnej2GEfEKKd4OM=; b=dQVd1Sci2trPUHNdg5uKww0LQBA9fp3c2bBA633nNxg4mSQa+tlgEIZnCycgzt8tlbZNwo dOh06NRowKbNlCAHC4AANEyHbP6pGajE7kdcRSFwvmXMu1u7njxtFkfSjyn/esKD3OSHUY mJ457rLiOCKtcp9OPE/6MVtna7uORfW8FQD//m8B/iN8oA5KkOedcn9rl7mqMKGJpibt/W VUgWAHGgPF4UvgaFlS6serY2yJ7wF+CVaOL12KWZuxarVOAnaOq/rtKyQlKtPNmWowKrnS EsRJhmZSexVXPB6XjTozvmGCVrOQuHzD+X9UkCaan8l8XqbGvUzU33f+zrgHrQ== Date: Sat, 17 Aug 2024 09:50:11 +0200 From: Alexander Leidinger To: Mathieu Arnold Cc: Kevin Bowling , Gleb Popov , Vladimir Druzenko , ports-committers@freebsd.org, dev-commits-ports-all@freebsd.org, dev-commits-ports-main@freebsd.org Subject: =?UTF-8?Q?Re=3A_git=3A_72dd8d2ee676_-_main_-_mail/dovecot=3A_upd?= =?UTF-8?Q?ate_2=2E3=2E21_=E2=86=92_2=2E3=2E21=2E1_=28fixes_2_CVEs=29?= In-Reply-To: References: <202408161835.47GIZuZJ084942@gitrepo.freebsd.org> <5b4df306-2998-4f98-b5fa-8bf168cd011a@freebsd.org> Message-ID: <057384a74426fde1ce68015d76d6befb@Leidinger.net> Organization: No organization, this is a private message. Content-Type: multipart/signed; protocol="application/pgp-signature"; boundary="=_eee449d43b525d4da8231895232cdacc"; micalg=pgp-sha256 X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:34240, ipnet:89.238.64.0/18, country:DE] X-Rspamd-Queue-Id: 4Wm9z25NYHz4DVk This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --=_eee449d43b525d4da8231895232cdacc Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; format=flowed Am 2024-08-17 09:26, schrieb Mathieu Arnold: > On Sat, Aug 17, 2024 at 12:15:54AM GMT, Kevin Bowling wrote: >> I'm not really sure why this is turning into a discussion. The >> request is standard practice for handling CVEs in the repo and a >> courtesy to other committers and even more for users who rely on tools >> like pkg audit and do not watch commit logs. > > Technically, it does not need to be a discussion. Maintaining the VuXML > database is ports-secteam's job, it's in their charter. > > Now, ports-secteam has no members, so nobody is maintaining the VuXML > database. > > Ports committers can update it, but they have absolutely no obligation > to, it's on a best effort basis. An entry for dovecot is committed to vuxml. Bye, Alexander. -- http://www.Leidinger.net Alexander@Leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeBSD.org netchild@FreeBSD.org : PGP 0x8F31830F9F2772BF --=_eee449d43b525d4da8231895232cdacc Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc; size=833 Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEER9UlYXp1PSd08nWXEg2wmwP42IYFAmbAVkIACgkQEg2wmwP4 2IYIag//YnoBqaToOIvNHtKIGiq040dsT/3su7PbY5CYqeq3nqZhcdJ2EeIp3X0A 8TX7kxfqCs52+SaUf/yXdhqvkLy3/uHcCWngGq6TqUuPW46hUS3MIp8L4wuWV11i XVmuRdOw6cSaTrh3CyYoRbKwIPo55S8S9OgbxxK/+xpPtc9io5lWe5IQJxvP+jTc tUGhNwSvtQrMYygWLrhR1SuI3ghyYwMGIykk/pIfE/4+cvzLlPXvrPC7vbLGMQNF L1zb23Rk7YZbtO+FSrQ282MvooleDAfrNdHATOxTFrDIYZHcn6Lk8iN35lHFJOei 2u7y0qMYLrvcj8HRlY18Od49R/OaLaLGf6N3mdZQU+oWkewrZdVhBohqwfKMax2Z kDVORGFpW+OsI6DDOjMZPagZ0W/bM1Ip9JrsPGCarhdqOPodN3hIN381LbX7bVYw ALbAfgybasdGYnCQ60h+SYklR1sMZUlmarr4AumNvuMWOCeBsTdrM3e3xCt4Xohf 9XB43eDKzB+NcrBRSmEITGsv+QbPzzHFjXdeRNUCEVBxujNhEtgVVGuwFY2LYJqt TLA4TwyMinDXCIAbvCd/Uzf14dGVcDuvUY7ZVjF2kzEjrKrKIQm3nAe94fvzJgqp BVN5ytr8c2TGID7GTHg1zvpER/IUl1GlesLFfra9O+4+4TGO+5M= =IjE7 -----END PGP SIGNATURE----- --=_eee449d43b525d4da8231895232cdacc--