From owner-freebsd-ports-bugs@FreeBSD.ORG Fri Feb 8 06:00:06 2008 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1388716A469 for ; Fri, 8 Feb 2008 06:00:06 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 07DB913C4D1 for ; Fri, 8 Feb 2008 06:00:06 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m18605FO048539 for ; Fri, 8 Feb 2008 06:00:05 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m18605IH048538; Fri, 8 Feb 2008 06:00:05 GMT (envelope-from gnats) Date: Fri, 8 Feb 2008 06:00:05 GMT Message-Id: <200802080600.m18605IH048538@freefall.freebsd.org> To: freebsd-ports-bugs@FreeBSD.org From: Mikhail Teterin Cc: Subject: Re: ports/120379: devel/icu should be patched X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Mikhail Teterin List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Feb 2008 06:00:06 -0000 The following reply was made to PR ports/120379; it has been noted by GNATS. From: Mikhail Teterin To: bug-followup@freebsd.org, turutani@scphys.kyoto-u.ac.jp Cc: "George Rhoten" Subject: Re: ports/120379: devel/icu should be patched Date: Fri, 8 Feb 2008 00:31:04 -0500 = devel/icu has been updated (3.6 -> 3.8.1). = i guess this is done because of CVE-2007-4770 etc, No, it was done to stay current -- up to date with the most recent ICU. I was not aware of the security problem and am surprised, the 3.8.1 release, which was released in 2008, does not have a fix... I'll look into applying the patch, thanks! = in addition, major version of libraries are changed. = hence, building other ports fails, especially they depends devel/glib20 and = glib is built with "WITH_COLLATION_FIX=1". You'll want to file a PR against /those ports/. = i want some comments about this in UPDATING... ? -mi