From owner-cvs-all@FreeBSD.ORG Mon Jun 14 13:39:08 2010 Return-Path: Delivered-To: cvs-all@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1F19C1065672 for ; Mon, 14 Jun 2010 13:39:08 +0000 (UTC) (envelope-from lioux@FreeBSD.org) Received: from goat.gigo.com (ipv6.gigo.com [IPv6:2001:470:1:18::2]) by mx1.freebsd.org (Postfix) with ESMTP id F07928FC16 for ; Mon, 14 Jun 2010 13:39:07 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by goat.gigo.com (Postfix) with ESMTP id 620785C62 for ; Mon, 14 Jun 2010 06:39:06 -0700 (PDT) Received: from goat.gigo.com ([127.0.0.1]) by localhost (vette.gigo.com [127.0.0.1]) (amavisd-new, port 10023) with ESMTP id rNjvY5bg+7nd for ; Mon, 14 Jun 2010 06:39:06 -0700 (PDT) Received: from 200.181.39.91 (200-181-39-91.bsace702.dsl.brasiltelecom.net.br [200.181.39.91]) by goat.gigo.com (Postfix) with ESMTPSA id 446BD5C44 for ; Mon, 14 Jun 2010 06:39:05 -0700 (PDT) Received: (qmail 46767 invoked by uid 80); 14 Jun 2010 10:37:44 -0300 Received: from 200.201.164.49 ([200.201.164.49]) by exxodus.dyndns.org (Horde Framework) with HTTP; Mon, 14 Jun 2010 10:38:08 -0300 Message-ID: <20100614103808.178226fplw933wzk@exxodus.dyndns.org> Date: Mon, 14 Jun 2010 10:38:08 -0300 From: Mario Sergio Fujikawa Ferreira To: Ion-Mihai Tetcu References: <201006131150.o5DBohDo089108@repoman.freebsd.org> <20100613155227.06b69f26@it.buh.tecnik93.com> (sfid-20100613_10270_71C95937) In-Reply-To: <20100613155227.06b69f26@it.buh.tecnik93.com> (sfid-20100613_10270_71C95937) MIME-Version: 1.0 User-Agent: Dynamic Internet Messaging Program (DIMP) H3 (1.1.4) Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Content-Description: Plaintext Version of Message X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org, ports-committers@FreeBSD.org Subject: Re: cvs commit: ports/net-p2p/i2p Makefile distinfo X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Jun 2010 13:39:08 -0000 Quoting Ion-Mihai Tetcu : > On Sun, 13 Jun 2010 11:50:43 +0000 (UTC) > Mario Sergio Fujikawa Ferreira wrote: > >> lioux 2010-06-13 11:50:43 UTC >> >> FreeBSD ports repository >> >> Modified files: >> net-p2p/i2p Makefile distinfo >> Log: >> - Update i2p to 0.7.14 >> - Update jetty to 5.1.15 due to security issues > > What issues? is there an VuXMl entry? Or at least an external reference > (CVS, ...? Sorry, according to the I2P site, they're referring to the following CERT Vulnerability Note VU#402580: http://www.kb.cert.org/vuls/id/402580 Perhaps, we should add to VuXML that any version of the net-p2p/i2p prior to 0.7.14 is vulnerable due to that CERT. I've never added anything to VuXML before so I am not sure what is the proper procedure. Regards, -- Mario S F Ferreira - DF - Brazil - "I guess this is a signature." feature, n: a documented bug | bug, n: an undocumented feature