From owner-freebsd-gnome@FreeBSD.ORG Fri Jun 20 11:50:45 2008 Return-Path: Delivered-To: freebsd-gnome@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DB59E10656AF for ; Fri, 20 Jun 2008 11:50:45 +0000 (UTC) (envelope-from freebsd-gnome@m.gmane.org) Received: from ciao.gmane.org (main.gmane.org [80.91.229.2]) by mx1.freebsd.org (Postfix) with ESMTP id 972BA8FC21 for ; Fri, 20 Jun 2008 11:50:45 +0000 (UTC) (envelope-from freebsd-gnome@m.gmane.org) Received: from list by ciao.gmane.org with local (Exim 4.43) id 1K9f8b-0000ow-NL for freebsd-gnome@freebsd.org; Fri, 20 Jun 2008 11:50:41 +0000 Received: from firewall.andxor.it ([195.223.2.2]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 20 Jun 2008 11:50:41 +0000 Received: from lapo by firewall.andxor.it with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 20 Jun 2008 11:50:41 +0000 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-gnome@freebsd.org From: Lapo Luchini Date: Fri, 20 Jun 2008 13:50:31 +0200 Lines: 17 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: firewall.andxor.it User-Agent: Thunderbird 2.0.0.14 (X11/20080618) In-Reply-To: X-Enigmail-Version: 0.95.6 OpenPGP: id=C8F252FB Sender: news Subject: Re: CALL FOR TEST: Updates to pixmap, cairo, poppler, and firefox 3.0! X-BeenThere: freebsd-gnome@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: GNOME for FreeBSD -- porting and maintaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Jun 2008 11:50:45 -0000 Rene Ladan wrote: >> Affected package: firefox-3.0_1,1 >> Type of problem: mozilla -- multiple vulnerabilities. >> Reference: > > Is this a false positive? It seems to affect firefox >3.*,1 but the > CVE entries say it is fixed in firefox 2.0.0.5 It is probably "correct" meaning that that bug was present in both 2.0.0.4 and the only firefox3 present in the "official" ports (that is, 3.0a4), and doesn't take into account a port that "still is not official" in its exlusion list, of course =) -- Lapo Luchini - http://lapo.it/ “I never think of the future, it comes soon enough.” (Albert Einstein)