From owner-freebsd-ports@FreeBSD.ORG  Tue Jan  6 04:51:32 2009
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Delivered-To: freebsd-ports@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id C1141106564A
	for <freebsd-ports@freebsd.org>; Tue,  6 Jan 2009 04:51:32 +0000 (UTC)
	(envelope-from randy@psg.com)
Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:1::36])
	by mx1.freebsd.org (Postfix) with ESMTP id A656E8FC14
	for <freebsd-ports@freebsd.org>; Tue,  6 Jan 2009 04:51:32 +0000 (UTC)
	(envelope-from randy@psg.com)
Received: from 50.216.138.210.bn.2iij.net ([210.138.216.50] helo=rmac.psg.com)
	by ran.psg.com with esmtpsa (TLSv1:CAMELLIA256-SHA:256)
	(Exim 4.69 (FreeBSD)) (envelope-from <randy@psg.com>)
	id 1LK3ud-0002ls-E7
	for freebsd-ports@freebsd.org; Tue, 06 Jan 2009 04:51:31 +0000
Message-ID: <4962E351.7060205@psg.com>
Date: Tue, 06 Jan 2009 13:51:29 +0900
From: Randy Bush <randy@psg.com>
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US;
	rv:1.9.1b3pre) Gecko/20081204 Thunderbird/3.0b1
MIME-Version: 1.0
To: freebsd ports <freebsd-ports@freebsd.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: xterm vuln
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Jan 2009 04:51:33 -0000

so portaudit reported an xterm vuln.  i cvsupped which did change things 
in xterm.

# grep xterm cvsup.log
  Edit ports/x11/xterm/Makefile
  Edit ports/x11/xterm/distinfo

but when i run portupgrade

--->  Upgrade of x11/xterm started at: Tue, 06 Jan 2009 04:48:44 +0000
--->  Upgrading 'xterm-237_1' to 'xterm-238' (x11/xterm)
--->  Build of x11/xterm started at: Tue, 06 Jan 2009 04:48:44 +0000
--->  Building '/usr/ports/x11/xterm'
===>  Cleaning for xterm-238
===>  xterm-238 has known vulnerabilities:
=> xterm -- DECRQSS remote command execution vulnerability.
    Reference: 
<http://www.FreeBSD.org/ports/portaudit/d5e1aac8-db0b-11dd-ae30-001cc0377035.html>
=> Please update your ports tree and try again.
*** Error code 1

whack me with the clue bat, please.

randy