From owner-freebsd-ports-bugs@FreeBSD.ORG Sat Sep 3 11:12:53 2011 Return-Path: Delivered-To: freebsd-ports-bugs@FreeBSD.org Received: from apollo.emma.line.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by hub.freebsd.org (Postfix) with ESMTP id E8A3310656D9; Sat, 3 Sep 2011 11:12:52 +0000 (UTC) (envelope-from mandree@FreeBSD.org) Received: from [127.0.0.1] (localhost.localdomain [127.0.0.1]) by apollo.emma.line.org (Postfix) with ESMTP id F3F4623CF4F; Sat, 3 Sep 2011 13:12:51 +0200 (CEST) Message-ID: <4E620BB3.3030504@FreeBSD.org> Date: Sat, 03 Sep 2011 13:12:51 +0200 From: Matthias Andree User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.21) Gecko/20110831 Mnenhy/0.8.3 Thunderbird/3.1.13 MIME-Version: 1.0 To: FreeBSD-gnats-submit@FreeBSD.org, freebsd-ports-bugs@FreeBSD.org, Brooks Davis , Koop Mast References: <201109031110.p83BAAT4032490@freefall.freebsd.org> In-Reply-To: <201109031110.p83BAAT4032490@freefall.freebsd.org> X-Enigmail-Version: 1.1.2 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit Cc: Subject: Re: ports/160418: [PATCH] URGENT security/ca_root_nss: disable DigiNotar trust X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Sep 2011 11:12:53 -0000 Am 03.09.2011 13:10, schrieb FreeBSD-gnats-submit@FreeBSD.org: > Thank you very much for your problem report. > It has the internal identification `ports/160418'. > The individual assigned to look at your > report is: freebsd-ports-bugs. > > You can access the state of your problem report at any time > via this link: > > http://www.freebsd.org/cgi/query-pr.cgi?pr=160418 > >> Category: ports >> Responsible: freebsd-ports-bugs >> Synopsis: [PATCH] URGENT security/ca_root_nss: disable DigiNotar trust >> Arrival-Date: Sat Sep 03 11:10:10 UTC 2011 Please don't use this, but update to the new CKBI database which has "explicit distrust DigiNotar" entries. This should happen ASAP, if possible today, to avoid users being eavesdropped on with counterfeit Google certificates that crooks signed after a break-in into DigiNotar systems.