Date: Fri, 8 Feb 2008 06:00:05 GMT From: Mikhail Teterin <mi+mill@aldan.algebra.com> To: freebsd-ports-bugs@FreeBSD.org Subject: Re: ports/120379: devel/icu should be patched Message-ID: <200802080600.m18605IH048538@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR ports/120379; it has been noted by GNATS. From: Mikhail Teterin <mi+mill@aldan.algebra.com> To: bug-followup@freebsd.org, turutani@scphys.kyoto-u.ac.jp Cc: "George Rhoten" <grhoten@gmail.com> Subject: Re: ports/120379: devel/icu should be patched Date: Fri, 8 Feb 2008 00:31:04 -0500 = devel/icu has been updated (3.6 -> 3.8.1). = i guess this is done because of CVE-2007-4770 etc, No, it was done to stay current -- up to date with the most recent ICU. I was not aware of the security problem and am surprised, the 3.8.1 release, which was released in 2008, does not have a fix... I'll look into applying the patch, thanks! = in addition, major version of libraries are changed. = hence, building other ports fails, especially they depends devel/glib20 and = glib is built with "WITH_COLLATION_FIX=1". You'll want to file a PR against /those ports/. = i want some comments about this in UPDATING... ? -mi
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200802080600.m18605IH048538>