From owner-freebsd-ports@FreeBSD.ORG Fri Aug 15 16:19:11 2008 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0BDDD106566B for ; Fri, 15 Aug 2008 16:19:11 +0000 (UTC) (envelope-from jack@jarasoft.net) Received: from raats.xs4all.nl (raats.xs4all.nl [82.95.230.43]) by mx1.freebsd.org (Postfix) with ESMTP id ABBBA8FC0A for ; Fri, 15 Aug 2008 16:19:10 +0000 (UTC) (envelope-from jack@jarasoft.net) Received: from raats.xs4all.nl (localhost.jarasoft.net [127.0.0.1]) by raats.xs4all.nl (Postfix) with ESMTP id 4D068233BD; Fri, 15 Aug 2008 18:19:17 +0200 (CEST) Received: from jara3 (jara-3 [192.168.1.101]) by raats.xs4all.nl (Postfix) with ESMTPA id 16DC02284D; Fri, 15 Aug 2008 18:19:17 +0200 (CEST) Message-ID: <1BC3C690B0C84893995519ED451C89FD@jarasoft.net> From: "Jack Raats" To: "Alexander Leidinger" , References: <19AB45AE83434B6A82662866D6A232D6@jarasoft.net> <20080815173915.4b778173@deskjail> Date: Fri, 15 Aug 2008 18:19:09 +0200 Organization: JaRaSoft, Steenbergen, Nederland MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.5512 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579 X-Relayed-By: GPGrelay Version 0.959 (Win32) X-Virus-Scanned: ClamAV using ClamSMTP on orac.jarasoft.net Cc: Subject: Re: Postfix 2.5.4 X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Jack Raats List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Aug 2008 16:19:11 -0000 From: "Alexander Leidinger" >> Postfix 2.5.4 has a fix for a high vulnerabilty. >> Anyone porting this foor FreeBSD? > > If you are talking about the symlink stuff, FreeBSD is not vulnerable, > as it conform to the POSIX standard in the relevant area. I know but the one in the ports is 2.5.1 and the new one is 2.5.4. So we are a few bugfixes behind Jack