Wednesday, August 30, 2023

Re: net/synapse package vulnerable, 14 updates behind?

Hello,

Version 1.89 is available in -current with official repos.
If you run 7.3, you can either compile it yourself from -current sources
or, if you use amd64, use my repo: https://arnor.org/pub/OpenBSD/
Be aware that this repo is unofficial and not supported by OpenBSD.

Synapse is updated very often and it's not always possible to do a clean
official backport to 7.3 because it sometimes conflicts with other packages.

Best Regards

On 8/30/23 09:39, Oikei wrote:
> Hello, I'm new to OpenBSD so im unsure if im doing something wrong or if im even posting to the right mailing list
> It has come to my attention that the net/synapse package is 14 updates behind and is vulnerable. I checked openbsd.app and the net/synapse package really is 14 updates behind, with it being on 1.76 while the latest is 1.90.
> Checking the source on github: https://github.com/openbsd/ports/tree/master/net/synapse
> it was updated last month and is on 1.89.
>
> So my question is, why is the latest version in the repos 1.76 when looking at the source its on 1.89? Sorry if I totally missed something...
>
> Best regards

No comments:

Post a Comment