15:03 <cruxbot> [contrib.git/3.6]: yt-dlp: 2022.03.08.1

15:03 <cruxbot> [contrib.git/3.6]: bmake: 2022-03-03

16:03 <cruxbot> [opt.git/3.6]: samba: update to 4.15.6

17:30 <stenur> Hopefully the OpenSSL update comes soon, OpenBSD already publicly committed the fix to their source tree

17:31 <stenur> "everything dealing with untrusted certificates is affected, notably TLS servers explicitly configured to request client certificates (httpd, smtpd, various VPN implementations, ...)."

17:33 <stenur> Heh. OpenSSL came too. Sorry for the noise.

17:34 <stenur> "any process that parses an externally supplied certificate may thus be subject to a denial of service attack."

17:35 <stenur> Heck OpenBSD. OpenSSL writes instead "Thus vulnerable situations include:"

17:35 <stenur> - TLS clients consuming server certificates

17:35 <stenur> - TLS servers consuming client certificates

17:35 <stenur> - Anything else which parses ASN.1 elliptic curve parameters

17:46 <cruxbot> [core.git/3.6]: [notify] openssl: update to 1.1.1n, security fix for CVE-2022-0778

19:27 <stenur> btw my port-up.sh is now http://ix.io/3SlK

19:28 <stenur> resume is fixed and we go winding roads to check whether a port is really up-to-date.

19:28 <stenur> also it should work out of the box and does not require script adjustments to run

19:28 <stenur> i *really* hope i can stop thinking about that mess

19:29 <stenur> maybe jaeger@ will someday do a rewrite. or maybe myself. or we use that of voidlinux or archlinux or what-do-i-know.