Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 28 May 2012 13:24:07 -0700
From:      Eitan Adler <lists@eitanadler.com>
To:        Stephen Montgomery-Smith <stephen@missouri.edu>
Cc:        ports-security@freebsd.org, Stephen Montgomery-Smith <stephen@freebsd.org>, freebsd-ports@freebsd.org
Subject:   Re: math/sage security risk
Message-ID:  <CAF6rxgndO87EpjTd4SN2HMqOChoFX4fwfYxua0FcoxVNa0=sOg@mail.gmail.com>
In-Reply-To: <4FC3DC9C.4030301@missouri.edu>
References:  <4FC3B293.6090701@missouri.edu> <CAF6rxgk=hfTm6isiJXaBxARhtxUxXKy9zf9nHw3VhPz6os4z9g@mail.gmail.com> <4FC3DC9C.4030301@missouri.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On 28 May 2012 13:14, Stephen Montgomery-Smith <stephen@missouri.edu> wrote:
> I just committed instructions to the port math/sage telling users how to add
> the optional packages manually, and explaining the security risk.

We have a more general problem here of ports fetching post-fetch. I
know others have brought this up already but count me in as someone
who would like to see a fix already :)

> Please contact me if this is still a problem.

This seems adequate for now


-- 
Eitan Adler



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAF6rxgndO87EpjTd4SN2HMqOChoFX4fwfYxua0FcoxVNa0=sOg>