From owner-freebsd-questions@FreeBSD.ORG  Wed Dec 22 01:19:28 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A3F8116A4CE
	for <freebsd-questions@freebsd.org>;
	Wed, 22 Dec 2004 01:19:28 +0000 (GMT)
Received: from obsecurity.dyndns.org
	(CPE0050040655c8-CM00111ae02aac.cpe.net.cable.rogers.com [69.194.102.143])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 721EE43D1D
	for <freebsd-questions@freebsd.org>;
	Wed, 22 Dec 2004 01:19:28 +0000 (GMT)
	(envelope-from kris@obsecurity.org)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id CAD1A512BF; Tue, 21 Dec 2004 17:19:27 -0800 (PST)
Date: Tue, 21 Dec 2004 17:19:27 -0800
From: Kris Kennaway <kris@obsecurity.org>
To: Mark <mark@darklogik.org>
Message-ID: <20041222011927.GA60472@xor.obsecurity.org>
References: <20041221234938.GA28906@xor.obsecurity.org>
	<20041221161647.A2610@logik.ath.cx>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="jRHKVT23PllUwdXP"
Content-Disposition: inline
In-Reply-To: <20041221161647.A2610@logik.ath.cx>
User-Agent: Mutt/1.4.2.1i
cc: freebsd-questions@freebsd.org
cc: kris@obsecurity.org
Subject: Re: xpdf/openmotif/xpm
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Dec 2004 01:19:28 -0000


--jRHKVT23PllUwdXP
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Dec 21, 2004 at 04:16:47PM -0800, Mark wrote:
> On Tue, Dec 21, 2004 at 03:49:38PM -0800, Kris Kennaway wrote:
> > What pages?  I don't see any evidence of a commit to openmotif that
> > fixes this problem.  If this is the case, you need to talk to the
> > openmotif developers to find out about the status of this
> > vulnerability.
>=20
> Ah, oops. Seems I was looking at the wrong openmotif (linux-openmotif).
> I'll contact the developers directly.

You should also talk to the port maintainer to see if they've got work
in progress to fix it.  e.g. there might already be a fix released by
the authors, which needs someone to submit an update to the FreeBSD
port.

Kris


--jRHKVT23PllUwdXP
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)

iD8DBQFByMufWry0BWjoQKURAk7cAJwLImc49mDWfBBNBfNREBEQrzYN+QCfeeKr
ddSlJbvAkp9YaurqGAJsZCk=
=AXp/
-----END PGP SIGNATURE-----

--jRHKVT23PllUwdXP--