Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 1 Mar 2001 19:34:59 +0200
From:      Peter Pentchev <roam@orbitel.bg>
To:        Kris Kennaway <kris@obsecurity.org>
Cc:        Ying-Chieh Liao <ijliao@FreeBSD.org>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: ports/sysutils Makefile ports/sysutils/fcron Makefile distinfo pkg-comment pkg-descr pkg-plist
Message-ID:  <20010301193459.F55211@ringworld.oblivion.bg>
In-Reply-To: <20010301092339.B41149@mollari.cthul.hu>; from kris@obsecurity.org on Thu, Mar 01, 2001 at 09:23:39AM -0800
References:  <200103011633.f21GXLA34100@freefall.freebsd.org> <20010301092339.B41149@mollari.cthul.hu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Mar 01, 2001 at 09:23:39AM -0800, Kris Kennaway wrote:
> On Thu, Mar 01, 2001 at 08:33:20AM -0800, Ying-Chieh Liao wrote:
> > ijliao      2001/03/01 08:33:20 PST
> > 
> >   Modified files:
> >     sysutils             Makefile 
> >   Added files:
> >     sysutils/fcron       Makefile distinfo pkg-comment pkg-descr 
> >                          pkg-plist 
> >   Log:
> >   add fcron, a periodical command scheduler
> 
> Doesn't this have a claimed local vulnerability, as published
> yesterday on bugtraq? I deleted the email because at the time I read
> it, fcron wasn't in ports.

The Bugtraq posting talks about a vulnerability in version 0.9.5,
and explicitly mentions at the end that the issue is resolved
in 1.0.1.  What ijliao imported was 1.0.1.

Nice for alertness, though! :)

G'luck,
Peter

-- 
.siht ekil ti gnidaer eb d'uoy ,werbeH ni erew ecnetnes siht fI

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010301193459.F55211>