From owner-cvs-all Thu Mar 1 9:35:29 2001 Delivered-To: cvs-all@freebsd.org Received: from ringworld.nanolink.com (ringworld.nanolink.com [195.24.48.13]) by hub.freebsd.org (Postfix) with SMTP id 42AB037B71B for ; Thu, 1 Mar 2001 09:35:20 -0800 (PST) (envelope-from roam@orbitel.bg) Received: (qmail 75325 invoked by uid 1000); 1 Mar 2001 17:35:00 -0000 Date: Thu, 1 Mar 2001 19:34:59 +0200 From: Peter Pentchev To: Kris Kennaway Cc: Ying-Chieh Liao , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: ports/sysutils Makefile ports/sysutils/fcron Makefile distinfo pkg-comment pkg-descr pkg-plist Message-ID: <20010301193459.F55211@ringworld.oblivion.bg> Mail-Followup-To: Kris Kennaway , Ying-Chieh Liao , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org References: <200103011633.f21GXLA34100@freefall.freebsd.org> <20010301092339.B41149@mollari.cthul.hu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010301092339.B41149@mollari.cthul.hu>; from kris@obsecurity.org on Thu, Mar 01, 2001 at 09:23:39AM -0800 Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, Mar 01, 2001 at 09:23:39AM -0800, Kris Kennaway wrote: > On Thu, Mar 01, 2001 at 08:33:20AM -0800, Ying-Chieh Liao wrote: > > ijliao 2001/03/01 08:33:20 PST > > > > Modified files: > > sysutils Makefile > > Added files: > > sysutils/fcron Makefile distinfo pkg-comment pkg-descr > > pkg-plist > > Log: > > add fcron, a periodical command scheduler > > Doesn't this have a claimed local vulnerability, as published > yesterday on bugtraq? I deleted the email because at the time I read > it, fcron wasn't in ports. The Bugtraq posting talks about a vulnerability in version 0.9.5, and explicitly mentions at the end that the issue is resolved in 1.0.1. What ijliao imported was 1.0.1. Nice for alertness, though! :) G'luck, Peter -- .siht ekil ti gnidaer eb d'uoy ,werbeH ni erew ecnetnes siht fI To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message