Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 9 Oct 2016 14:07:48 +1100 (EST)
From:      Dave Horsfall <dave@horsfall.org>
To:        FreeBSD Ports <freebsd-ports@freebsd.org>
Subject:   Re: Vulnerabilities in X libs
Message-ID:  <alpine.BSF.2.11.1610091358420.16847@aneurin.horsfall.org>
In-Reply-To: <CAN6yY1sdx2sA2%2ByH0SJcHxNzTm8gb1LT5gJzgn7H%2B_tJLF1WZg@mail.gmail.com>
References:  <alpine.BSF.2.11.1610091138480.16847@aneurin.horsfall.org> <CAN6yY1sdx2sA2%2ByH0SJcHxNzTm8gb1LT5gJzgn7H%2B_tJLF1WZg@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 8 Oct 2016, Kevin Oberman wrote:

> > libXrender-0.9.9 is vulnerable
> > libX11-1.6.3,1 is vulnerable
> >
> > "freebsd-update fetch" is not (yet) fetching anything.
> 
> Depending on timezone, these were resolved last night. Update your ports 
> tree (svn or portsnap) and you should have it. If you are using 
> packages, you will need to wait until the next build is completed. 
> freebsd-update only updates the base system, not ports.

Nope, at least not as of 1400 UTC+11.  System is 9.3-REL p43 (soon to go 
to 10.3 when I'm sure that my ports are clean - it was corrupt for a 
while), and won't go to p47 because of those vulnerabilities.

I'm not too concerned; my system is locked down tighter than a duck's bum.

-- 
Dave Horsfall DTM (VK2KFU)  "Those who don't understand security will suffer."



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.11.1610091358420.16847>