[Bug 282716] net-im/gurk-rs: Update to 0.5.2

From: <bugzilla-noreply_at_freebsd.org>
Date: Fri, 22 Nov 2024 13:14:06 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=282716

Robert Clausecker <fuz@FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|New                         |Open
           Assignee|ports-bugs@FreeBSD.org      |fuz@FreeBSD.org
                 CC|                            |fuz@FreeBSD.org

--- Comment #2 from Robert Clausecker <fuz@FreeBSD.org> ---
This port seems to bundle OpenSSL:

$ cd net-im/gurk-rs && make
/!\ gurk-rs-0.5.2: Makefile warnings, please consider fixing /!\

Please make sure this port uses the system OpenSSL and consider removing
CARGO_CRATES=openssl-src-300.3.1+3.3.1 (a vendored copy of OpenSSL) from the
build, e.g., by patching Cargo.toml appropriately.

We do not want rust ports to bundle OpenSSL as that is a potentially severe
security issue.  Please check and patch as indicated.  Most likely, there is an
option to use system OpenSSL over the bundled one.

-- 
You are receiving this mail because:
You are the assignee for the bug.