From owner-freebsd-emulation@FreeBSD.ORG Wed Apr 23 16:26:30 2014 Return-Path: Delivered-To: emulation@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C837DC7F for ; Wed, 23 Apr 2014 16:26:30 +0000 (UTC) Received: from toy3.chip-web.com (toy3.chip-web.com [69.12.159.105]) by mx1.freebsd.org (Postfix) with ESMTP id ABE891A25 for ; Wed, 23 Apr 2014 16:26:30 +0000 (UTC) Received: from [172.16.10.10] (c-24-6-205-203.hsd1.ca.comcast.net [24.6.205.203]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: ludwigp) by toy3.chip-web.com (Postfix) with ESMTPSA id 5160FACD for ; Wed, 23 Apr 2014 09:18:59 -0700 (PDT) Message-ID: <5357E7F6.7060805@chip-web.com> Date: Wed, 23 Apr 2014 09:19:02 -0700 From: Ludwig Pummer User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 MIME-Version: 1.0 To: emulation@FreeBSD.org Subject: new linux-f10-expat due to CVE-2009-3720 ? Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: clamav-milter 0.97.3 at toy3.chip-web.com X-Virus-Status: Clean X-BeenThere: freebsd-emulation@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Development of Emulators of other operating systems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Apr 2014 16:26:30 -0000 portaudit started complaining to me about: Affected package: linux-f10-expat-2.0.1 Type of problem: expat2 -- Parser crash with specially formatted UTF-8 sequences. Reference: http://portaudit.FreeBSD.org/5f030587-e39a-11de-881e-001aa0166822.html Affects: expat2 <2.0.1_1 linux-f10-expat <2.0.1_1 However, this port hasn't been touched in 2 months and is still at version 2.0.1: http://svnweb.freebsd.org/ports/head/textproc/linux-f10-expat/ What are my options for clearing this security warning?