From owner-freebsd-security@FreeBSD.ORG Sun Jul 25 18:34:52 2010 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4096E1065675 for ; Sun, 25 Jul 2010 18:34:52 +0000 (UTC) (envelope-from lumiwa@gmail.com) Received: from mail-iw0-f182.google.com (mail-iw0-f182.google.com [209.85.214.182]) by mx1.freebsd.org (Postfix) with ESMTP id 8DB418FC0A for ; Sun, 25 Jul 2010 18:34:49 +0000 (UTC) Received: by iwn35 with SMTP id 35so2615672iwn.13 for ; Sun, 25 Jul 2010 11:34:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:from:to:subject:date :user-agent:mime-version:content-type:content-transfer-encoding :message-id; bh=J9ERElIlzM3N6/iRQ9yMOuxE2yI8oohZwNX4Wf0U8NU=; b=DcIJAFqBjh4a57XT46iAMpOdleHTDlrV2c5Xx3MQmY+4PE38GxikQEdchOarbVQprD VU9LWpuUe6fwaPS/D4+lvzRFvjsjT2/s9vTO+Ug/yW2sOjFRRgPj4dKI7mlQZZVsRTAQ 1RewdFhN8AvCSHpVZyepqLYuRFi+Uj9bEhqgA= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:to:subject:date:user-agent:mime-version:content-type :content-transfer-encoding:message-id; b=NCV5aKdKf4qIQu7tEQZ9LGB4I3tOJBd/NwAKxAgq1pb8X2pJ5xQt9YuktEdNT17amR 6oCVEm2fCeDfAmMLvCZ/ei+FAnjegxy9KeQnqU7DnrvxLj9kbiAYF9/mI4K8O42+KU2c YQocdcL9t8+5HccjGF7aAIeR+TEsLZOtHF9dU= Received: by 10.231.12.136 with SMTP id x8mr7275741ibx.54.1280081198091; Sun, 25 Jul 2010 11:06:38 -0700 (PDT) Received: from athena.wi.rr.com (CPE-65-29-60-73.wi.res.rr.com [65.29.60.73]) by mx.google.com with ESMTPS id n20sm2729924ibe.23.2010.07.25.11.06.36 (version=TLSv1/SSLv3 cipher=RC4-MD5); Sun, 25 Jul 2010 11:06:37 -0700 (PDT) From: ajtiM To: freebsd-security@freebsd.org Date: Sun, 25 Jul 2010 13:06:30 -0500 User-Agent: KMail/1.13.5 (FreeBSD/8.0-RELEASE-p4; KDE/4.4.5; i386; ; ) MIME-Version: 1.0 Content-Type: Text/Plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Message-Id: <201007251306.30579.lumiwa@gmail.com> Subject: portaudit X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 25 Jul 2010 18:34:52 -0000 Hi! portaudit -a shows: Affected package: mDNSResponder-214 Type of problem: mDNSResponder -- corrupted stack crash when parsing bad resolv.conf. Reference: Affected package: opera-10.10.20091120_2 Type of problem: opera -- Data URIs can be used to allow cross-site scripting. Reference: Affected package: linux-f10-pango-1.22.3_1 Type of problem: pango -- integer overflow. Reference: 3 problem(s) in your installed packages found. You are advised to update or deinstall the affected package(s) immediately. Do I need to deinstall those ports or is safe anyway? Thanks in advance. Mitja -------- http://starikarp.redbubble.com