Date: Thu, 29 Mar 2012 19:30:38 -0400 From: Jason Hellenthal <jhellenthal@dataix.net> To: Roman Bogorodskiy <bogorodskiy@gmail.com> Cc: ports@freebsd.org, novel@freebsd.org Subject: Re: security/gnutls update when... Message-ID: <20120329233037.GA98244@DataIX.net> In-Reply-To: <20120325152632.GC1293@kloomba> References: <20120324172937.GA43822@DataIX.net> <20120325152632.GC1293@kloomba>
next in thread | previous in thread | raw e-mail | index | archive | help
--r5Pyd7+fXNt84Ff3 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable There are no problems with this that can be seen. Thank you Roman. On Sun, Mar 25, 2012 at 07:26:34PM +0400, Roman Bogorodskiy wrote: > Jason Hellenthal wrote: >=20 > >=20 > > Apparently this port has fell two versions behind. Is there anything > > that is going to happen to update it to the current stable version ? > >=20 > >=20 > > These advisories have been out for a week now. And the current version > > is 2.12.18. > >=20 > >=20 > > Database created: Sat Mar 24 13:15:03 EDT 2012 > > Affected package: gnutls-2.12.16 > > Type of problem: libtasn1 -- ASN.1 length decoding vulnerability. > > Reference: > > http://portaudit.FreeBSD.org/2e7e9072-73a0-11e1-a883-001cc0a36e12.html > >=20 > > Affected package: gnutls-2.12.16 > > Type of problem: gnutls -- possible overflow/Denial of service > > vulnerabilities. > > Reference: > > http://portaudit.FreeBSD.org/aecee357-739e-11e1-a883-001cc0a36e12.html > >=20 > > 2 problem(s) in your installed packages found. >=20 > The port was updated to 2.12.18 with some hacks to prevent shlib version > bump. Please report if you have any problems with that. >=20 > Roman Bogorodskiy --=20 ;s =3D; --r5Pyd7+fXNt84Ff3 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iQEcBAEBAgAGBQJPdPCdAAoJEJBXh4mJ2FR+60cH/Ao3Kdfy+XiVqFrmojGnJTZo 6BrwOo35pfJK4HD6LI3L/6lhA0sQRmSZs8gqgdkMzpIOKsYXa4Y6e6Xq2bD5ItG4 etvCN5E0nDRndLGX3TPf049QpE224AoD3a2XGqu3Ayw27w/HllLV6KdZRhVvC7qq OPbGLxqiKJWeyKGC5c77Goxv4B+/L2kuk/4f9FB4asejwrbm8aQ/BJybjZmuIe7p ZWOKCdo1q5VHQ4Hek1sgcat9j+VB9X5g9p7LIRRqhRzy3F9/Req5zf7NHE63XuX6 jUdANkE6qf8fEOZbrPo2jMKDRFtjgiMi94IoP2Xgi/ny/iTqOo8QEyN/fDZX+sA= =7k83 -----END PGP SIGNATURE----- --r5Pyd7+fXNt84Ff3--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120329233037.GA98244>