From owner-freebsd-ports@FreeBSD.ORG  Mon Sep  5 17:15:51 2011
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Delivered-To: ports@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id BF0121065670
	for <ports@freebsd.org>; Mon,  5 Sep 2011 17:15:51 +0000 (UTC)
	(envelope-from mi+thun@aldan.algebra.com)
Received: from smtp02.lnh.mail.rcn.net (smtp02.lnh.mail.rcn.net
	[207.172.157.102])
	by mx1.freebsd.org (Postfix) with ESMTP id 77F058FC15
	for <ports@freebsd.org>; Mon,  5 Sep 2011 17:15:50 +0000 (UTC)
Received: from mr17.lnh.mail.rcn.net ([207.172.157.37])
	by smtp02.lnh.mail.rcn.net with ESMTP; 05 Sep 2011 13:15:50 -0400
Received: from smtp01.lnh.mail.rcn.net (smtp01.lnh.mail.rcn.net [207.172.4.11])
	by mr17.lnh.mail.rcn.net (MOS 4.2.3-GA) with ESMTP id BBG36170;
	Mon, 5 Sep 2011 13:15:49 -0400
Received-SPF: None identity=pra; client-ip=209.6.61.133;
	receiver=smtp01.lnh.mail.rcn.net;
	envelope-from="mi+thun@aldan.algebra.com";
	x-sender="mi+thun@aldan.algebra.com";
	x-conformance=sidf_compatible
Received-SPF: None identity=mailfrom; client-ip=209.6.61.133;
	receiver=smtp01.lnh.mail.rcn.net;
	envelope-from="mi+thun@aldan.algebra.com";
	x-sender="mi+thun@aldan.algebra.com";
	x-conformance=sidf_compatible
Received-SPF: None identity=helo; client-ip=209.6.61.133;
	receiver=smtp01.lnh.mail.rcn.net;
	envelope-from="mi+thun@aldan.algebra.com";
	x-sender="postmaster@[192.168.1.8]";
	x-conformance=sidf_compatible
X-Auth-ID: anat
Received: from 209-6-61-133.c3-0.sbo-ubr1.sbo.ma.cable.rcn.com (HELO
	[192.168.1.8]) ([209.6.61.133])
	by smtp01.lnh.mail.rcn.net with ESMTP; 05 Sep 2011 13:15:49 -0400
Message-ID: <4E6503C2.5080002@aldan.algebra.com>
Date: Mon, 05 Sep 2011 13:15:46 -0400
From: "Mikhail T." <mi+thun@aldan.algebra.com>
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64;
	rv:5.0) Gecko/20110706 Thunderbird/5.0
MIME-Version: 1.0
To: Chris Rees <utisoft@gmail.com>
References: <CADLo838g=r3C4pHVteObPYrA6VxB7+4banaEXeVrPwGD7MDAtg@mail.gmail.com>
	<CADLo83_A+Oh+i4ZFQ=KnZyvBk0h2pf+bJnjhYHm=5UyacjE3cA@mail.gmail.com>
In-Reply-To: <CADLo83_A+Oh+i4ZFQ=KnZyvBk0h2pf+bJnjhYHm=5UyacjE3cA@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Cc: ports@freebsd.org, yar@freebsd.org
Subject: Re: Re: sysutils/cfs
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 05 Sep 2011 17:15:51 -0000

On -10.01.-28163 14:59, Chris Rees wrote:
>> I've had to deprecate sysutils/cfs -- there's a confirmed issue with
>> failing locks [1] which has been open for two years with no fix.
>>
> Whoops, also missed a CVE -- buffer overflows can cause a DoS.
> Expiration date altered to 1 month accordingly.

Is this the only vulnerability you are talking about?

    http://www.debian.org/security/2006/dsa-1138

Does not seem hard to fix at all... Listing all of the fatal problems 
would be helpful...

    -mi