From owner-freebsd-ports@FreeBSD.ORG  Fri Aug 26 20:22:28 2011
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Delivered-To: freebsd-ports@FreeBSD.org
Received: from mx2.freebsd.org (mx2.freebsd.org [IPv6:2001:4f8:fff6::35])
	by hub.freebsd.org (Postfix) with ESMTP id 34DD0106564A;
	Fri, 26 Aug 2011 20:22:28 +0000 (UTC)
	(envelope-from dougb@FreeBSD.org)
Received: from 172-17-198-245.globalsuite.net (hub.freebsd.org
	[IPv6:2001:4f8:fff6::36])
	by mx2.freebsd.org (Postfix) with ESMTP id 381C9154B44;
	Fri, 26 Aug 2011 20:22:27 +0000 (UTC)
Message-ID: <4E580082.1030202@FreeBSD.org>
Date: Fri, 26 Aug 2011 13:22:26 -0700
From: Doug Barton <dougb@FreeBSD.org>
Organization: http://SupersetSolutions.com/
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64;
	rv:6.0) Gecko/20110824 Thunderbird/6.0
MIME-Version: 1.0
To: mnag@FreeBSD.org
References: <4E57FBC1.1020009@FreeBSD.org>
In-Reply-To: <4E57FBC1.1020009@FreeBSD.org>
X-Enigmail-Version: undefined
OpenPGP: id=1A1ABC84
X-Forwarded-Message-Id: <4E57FBC1.1020009@FreeBSD.org>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: freebsd-ports@FreeBSD.org
Subject: mail/postfix-policyd-spf relies on vulnerable mail/libspf2-10
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 26 Aug 2011 20:22:28 -0000

Howdy,

Doing some port updates and noticed that mail/postfix-policyd-spf relies
on mail/libspf2-10, which according to
http://portaudit.FreeBSD.org/2ddbfd29-a455-11dd-a55e-00163e000016.html
is vulnerable. There is a port of mail/libspf2 which is not vulnerable,
is it possible to update mail/postfix-policyd-spf to rely on it instead?


Thanks,

Doug

-- 

	Nothin' ever doesn't change, but nothin' changes much.
			-- OK Go

	Breadth of IT experience, and depth of knowledge in the DNS.
	Yours for the right price.  :)  http://SupersetSolutions.com/