From owner-cvs-all@FreeBSD.ORG  Thu Aug  5 21:30:27 2004
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id D37FE16A4D0; Thu,  5 Aug 2004 21:30:27 +0000 (GMT)
Received: from smtp.owt.com (smtp.owt.com [204.118.6.19])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 89FCC43D58; Thu,  5 Aug 2004 21:30:27 +0000 (GMT)
	(envelope-from kstewart@owt.com)
Received: from [207.41.94.233] (owt-207-41-94-233.owt.com [207.41.94.233])
	by smtp.owt.com (8.12.8/8.12.8) with ESMTP id i75LUENQ030570;
	Thu, 5 Aug 2004 14:30:14 -0700
From: Kent Stewart <kstewart@owt.com>
To: cvs-all@freebsd.org
Date: Thu, 5 Aug 2004 14:30:24 -0700
User-Agent: KMail/1.6.2
References: <200408051711.i75HBZDs076858@repoman.freebsd.org>
	<opsb9w6poj9aq2h7@mezz> <86isbxxp1x.wl%sf@FreeBSD.org>
In-Reply-To: <86isbxxp1x.wl%sf@FreeBSD.org>
MIME-Version: 1.0
Content-Disposition: inline
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <200408051430.24151.kstewart@owt.com>
cc: FUJISHIMA Satsuki <sf@freebsd.org>
cc: Jeremy Messenger <mezz7@cox.net>
cc: ports-committers@freebsd.org
cc: cvs-ports@freebsd.org
Subject: Re: cvs commit: ports/www/linux-opera Makefile distinfo pkg-message
	ports/www/linux-opera/files patch-locale::en::search.ini
	patch-search.ini         ports/www/opera Makefile distinfo
	ports/www/opera/files         patch-locale::en::search.ini
	patch-search.ini
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Aug 2004 21:30:28 -0000

On Thursday 05 August 2004 02:17 pm, FUJISHIMA Satsuki wrote:
> At Thu, 05 Aug 2004 14:17:03 -0500,
>
> Jeremy Messenger wrote:
> > > This version is still linked statically with vulnerable libpng.
> >
> > Is there any proof of test that it's has the same vulnerable in
> > (linux-)opera?
>
> $ linux-opera http://scary.beasts.org/misc/pngtest_bad.png
>
> It looks like vulnerable too.

I think all that means is that you didn't
portupgrade -rf png

png-1.2.5_8 is supposed to produce an error but not crash what ever you 
are using.

Kent

-- 
Kent Stewart
Richland, WA

http://users.owt.com/kstewart/index.html