Review a fix for OpenSSL3 CVE

2022-11-01 Thread Kirill A. Korinsky via macports-dev
Folks, OpenSSL team released a fix for found CVE: https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/ May I ask someone to review a PR to fix this CVE?

Re: Xcode (14.0.1) is too old

2022-11-01 Thread Gary Palter
Xcode 14.1 was just released and is in the Mac App Store. - Gary > On Nov 1, 2022, at 11:42 AM, Rainer Müller wrote: > > On 01/11/2022 14.02, Chris Jones wrote: >> Xcode 14.1 is indeed the recommended version for macOS13, as its the >> only one containing the macOS13 SDK (AKAIK). However,

Re: Review a fix for OpenSSL3 CVE

2022-11-01 Thread Daniel J. Luke
I don't mind waiting a bit for the maintainer for this one (especially since it looks like it's already been approved and merged by the maintainer :) ), but the policy that allows waiving maintainer permission was intended to specifically cover security issues (ie. we discussed this when

Re: having the "+test" or "+tests" variant propagate causes unexpected builds

2022-11-01 Thread Daniel J. Luke
On Oct 30, 2022, at 11:42 PM, Ken Cunningham wrote: > I wonder if there was consideration given way-back-when to the idea of having > NO propagation of variants at all. It was an intentional design. > Anything you wanted to apply to every port, you would put in variants.conf. > Otherwise,

Re: Review a fix for OpenSSL3 CVE

2022-11-01 Thread grey
I think neverpanic tends to be pretty responsive? Moreover in the severity was downgraded from Critical to High between the time the vulnerability was circulating through the grapevine until it actually was disclosed. There are also no known exploits in the wild thankfully. LibreSSL (which is

Re: Notability reqiurement for submitted ports?

2022-11-01 Thread Ryan Schmidt
On Oct 31, 2022, at 14:22, Zhenfu Shi wrote: > Hi all, > I’m thinking about submitting a small utility written in C++ to MP that is > really useful to only a small group of people (that is, rhythm gamers). Is > there any notability requirements for submitted ports, like they have in >

Re: Notability reqiurement for submitted ports?

2022-11-01 Thread Zhenfu Shi
Thanks Ryan! It’s already up and I’ll be maintaining it. Zhenfu > On Nov 1, 2022, at 18:24, Ryan Schmidt wrote: > > > > On Oct 31, 2022, at 14:22, Zhenfu Shi wrote: > >> Hi all, >> I’m thinking about submitting a small utility written in C++ to MP that is >> really useful to only a small

Re: Xcode (14.0.1) is too old

2022-11-01 Thread Chris Jones
Xcode 14.1 is indeed the recommended version for macOS13, as its the only one containing the macOS13 SDK (AKAIK). However, Apple apparently hit a few issues with it last minute and thus has not released a public version of it yet, so for now you need to download and install the 14.1 Xcode RC2

Xcode (14.0.1) is too old

2022-11-01 Thread Heinrich Rebehn
Hello, Sorry if this has been addressed before, I am new to this mailing list. Why am I seeing this: > MacPorts 2.8.0 > Entering shell mode... ("help" for help, "quit" to quit) > [Users/heinrich] > install mc > Error: The installed version of Xcode (14.0.1) is too old to use on the > installed

Re: Xcode (14.0.1) is too old

2022-11-01 Thread Rainer Müller
On 01/11/2022 14.02, Chris Jones wrote: > Xcode 14.1 is indeed the recommended version for macOS13, as its the > only one containing the macOS13 SDK (AKAIK). However, Apple apparently > hit a few issues with it last minute and thus has not released a public > version of it yet, so for now you need