From owner-freebsd-ports@FreeBSD.ORG Wed Nov 14 22:10:19 2007 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DFA1516A419 for ; Wed, 14 Nov 2007 22:10:19 +0000 (UTC) (envelope-from freebsd-ports@m.gmane.org) Received: from ciao.gmane.org (main.gmane.org [80.91.229.2]) by mx1.freebsd.org (Postfix) with ESMTP id 9BAFC13C46A for ; Wed, 14 Nov 2007 22:10:18 +0000 (UTC) (envelope-from freebsd-ports@m.gmane.org) Received: from root by ciao.gmane.org with local (Exim 4.43) id 1IsQQs-0008IO-6z for freebsd-ports@freebsd.org; Wed, 14 Nov 2007 22:10:02 +0000 Received: from laptop-andrew.isc.tamu.edu ([165.91.112.162]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 14 Nov 2007 22:10:02 +0000 Received: from ADaugherity by laptop-andrew.isc.tamu.edu with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 14 Nov 2007 22:10:02 +0000 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-ports@freebsd.org From: "Andrew Daugherity" Date: Wed, 14 Nov 2007 14:05:46 -0600 Lines: 32 Message-ID: <473B00BA.2689.00F2.0@vprmail.tamu.edu> References: <200711140449.49001.david@vizion2000.net> X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: laptop-andrew.isc.tamu.edu X-Newsreader: Groupwise 7.0.1 Sender: news Subject: Re: cups-base-1.3.3_2 issues-- X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Nov 2007 22:10:20 -0000 >>> On 11/14/2007 at 6:49 AM, in message <200711140449.49001.david@vizion2000.net>, David Southwell wrote: > ##Can anyone please advise best course of action??? > ##System is AMD 64 > > ##This is based upon an uptodate cvsup of ports all > > ---> Upgrading 'cups-base-1.3.3' to 'cups-base-1.3.3_2' (print/cups-base) > ---> Building '/usr/ports/print/cups-base' > ===> Cleaning for cups-base-1.3.3_2 > ===> cups-base-1.3.3_2 has known vulnerabilities: > => xpdf -- multiple remote Stream.CC vulnerabilities. > Reference: > 4716c.html> > => Please update your ports tree and try again. > *** Error code 1 cups-base was patched for this vulnerability (with version 1.3.3_2), but the change to the vulnerabilities file erroneously has it marked as cups-base > 1.3.3_2, instead of cups-base < 1.3.3_2: http://www.freebsd.org/cgi/cvsweb.cgi/ports/security/vuxml/vuln.xml?r1=1.148 1 (It was previously listed as cups-base > 0, i.e. all versions of cups-base were vulnerable.) Hopefully someone with the commit bit will see this and fix it. -Andrew