From owner-freebsd-ports@FreeBSD.ORG  Tue Jan  6 05:55:09 2009
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Delivered-To: freebsd-ports@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 082BC1065688
	for <freebsd-ports@freebsd.org>; Tue,  6 Jan 2009 05:55:09 +0000 (UTC)
	(envelope-from miwi@bsdcrew.de)
Received: from bsdcrew.de (duro.unixfreunde.de [85.214.90.4])
	by mx1.freebsd.org (Postfix) with ESMTP id C08568FC1D
	for <freebsd-ports@freebsd.org>; Tue,  6 Jan 2009 05:55:08 +0000 (UTC)
	(envelope-from miwi@bsdcrew.de)
Received: by bsdcrew.de (Postfix, from userid 1001)
	id 69D514ADA8; Tue,  6 Jan 2009 06:55:04 +0100 (CET)
Date: Tue, 6 Jan 2009 06:55:04 +0100
From: Martin Wilke <miwi@FreeBSD.org>
To: Randy Bush <randy@psg.com>
Message-ID: <20090106055503.GC99596@bsdcrew.de>
References: <4962E351.7060205@psg.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; x-action=pgp-signed
Content-Disposition: inline
In-Reply-To: <4962E351.7060205@psg.com>
User-Agent: Mutt/1.5.18 (2008-05-17)
Cc: freebsd ports <freebsd-ports@freebsd.org>
Subject: Re: xterm vuln
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Jan 2009 05:55:09 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Was fixed few hours ago :).

- - Martin

On Tue, Jan 06, 2009 at 01:51:29PM +0900, Randy Bush wrote:
> so portaudit reported an xterm vuln.  i cvsupped which did change things 
> in xterm.
> 
> # grep xterm cvsup.log
>   Edit ports/x11/xterm/Makefile
>   Edit ports/x11/xterm/distinfo
> 
> but when i run portupgrade
> 
> --->  Upgrade of x11/xterm started at: Tue, 06 Jan 2009 04:48:44 +0000
> --->  Upgrading 'xterm-237_1' to 'xterm-238' (x11/xterm)
> --->  Build of x11/xterm started at: Tue, 06 Jan 2009 04:48:44 +0000
> --->  Building '/usr/ports/x11/xterm'
> ===>  Cleaning for xterm-238
> ===>  xterm-238 has known vulnerabilities:
> => xterm -- DECRQSS remote command execution vulnerability.
>     Reference: 
> <http://www.FreeBSD.org/ports/portaudit/d5e1aac8-db0b-11dd-ae30-001cc0377035.html>
> => Please update your ports tree and try again.
> *** Error code 1
> 
> whack me with the clue bat, please.
> 
> randy
> _______________________________________________
> freebsd-ports@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ports
> To unsubscribe, send any mail to "freebsd-ports-unsubscribe@freebsd.org"
> 

- -- 

+-----------------------+-------------------------------+
|  PGP    : 0x05682353  |  Jabber : miwi(at)BSDCrew.de  |
|  ICQ    : 169139903   |  Mail   : miwi(at)FreeBSD.org |
+-----------------------+-------------------------------+
|	Mess with the Best, Die like the Rest!		|
+-----------------------+-------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (FreeBSD)

iEYEARECAAYFAkli8jcACgkQFwpycAVoI1OgvgCglRNJfKbJMRKRRC7L/k95V5Ds
x9cAnj6SndG2p68BVVirrYH5nxCxF5cd
=qVVD
-----END PGP SIGNATURE-----