From owner-freebsd-emulation@FreeBSD.ORG Tue Nov 3 16:40:04 2009 Return-Path: Delivered-To: freebsd-emulation@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9D0FA1065670 for ; Tue, 3 Nov 2009 16:40:04 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 8B78C8FC0C for ; Tue, 3 Nov 2009 16:40:04 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id nA3Ge47N009074 for ; Tue, 3 Nov 2009 16:40:04 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id nA3Ge496009073; Tue, 3 Nov 2009 16:40:04 GMT (envelope-from gnats) Date: Tue, 3 Nov 2009 16:40:04 GMT Message-Id: <200911031640.nA3Ge496009073@freefall.freebsd.org> To: freebsd-emulation@FreeBSD.org From: Alexander Best Cc: Subject: Re: ports/137332: add caution messages to some adobe products X-BeenThere: freebsd-emulation@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Alexander Best List-Id: Development of Emulators of other operating systems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Nov 2009 16:40:04 -0000 The following reply was made to PR ports/137332; it has been noted by GNATS. From: Alexander Best To: Tsurutani Naoki , Alexander Best Cc: Subject: Re: ports/137332: add caution messages to some adobe products Date: Tue, 03 Nov 2009 17:39:13 +0100 (CET) Tsurutani Naoki schrieb am 2009-11-03: > Alexander Best wrote: > > the latest security bulletin for flash9 recommends using version > > 9.0.246.0 > > which is the version in ports! > Yes, this is available, but it is not announced officially. well. this bulletin recommends using it: http://www.adobe.com/support/security/bulletins/apsb09-10.html so i guess it doesn't matter if it's an official release or just a patch-release. > www/linux-flashplugin7 is not maintained. please mark as ignore. > however, some linux_base might not support www/linux-flashplugin9 or > newer, > and some OS versions might not use new linux_base. i guess marking the port deprecated is the right thing to do. ignore should be used when there's an actual problem with the port which isn't the case. also VuXML's last entry for flash 7 is this one: http://www.vuxml.org/freebsd/562cf6c4-b9f1-11dc-a302-000102cc8983.html so according to them the version in the ports isn't affected by any security issue. however http://www.vuxml.org/freebsd/04c6187d-2d8f-11dd-98c9-00163e000016.html and http://www.vuxml.org/freebsd/78f456fd-9c87-11dd-a55e-00163e000016.html only mention flash 9 as affected port although the description says that earlier version might be affected too. might be that the adobe security bulletins dropped flash 7 support. > no other ports about adobe products has trouble, as I know. i'll try to come up with a small patch to mark flash 7 deprecated. alex