Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 30 Sep 2002 09:16:23 -0500
From:      "Jacques A. Vidrine" <nectar@FreeBSD.org>
To:        cvs-all@FreeBSD.org, cvs-committers@FreeBSD.org
Subject:   Re: cvs commit: ports/www/wn Makefile
Message-ID:  <20020930141623.GA18397@madman.nectar.cc>
In-Reply-To: <20020930133115.20B5937B4E8@hub.freebsd.org>
References:  <20020930133115.20B5937B4E8@hub.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Sep 30, 2002 at 06:31:15AM -0700, Jacques A. Vidrine wrote:
> nectar      2002/09/30 06:31:11 PDT
> 
>   Modified files:
>     www/wn               Makefile 
>   Log:
>   Contains a remotely exploitable buffer overflow.

The latest version of WN has a fix for this, if someone feels like
doing the upgrade (after the ports freeze is lifted).

This package is already marked 

        NO_PACKAGE=     "Hostname compiled in"

so I don't think there is any impact on 4.7-RELEASE in any case.

Cheers,
-- 
Jacques A. Vidrine <nectar@celabo.org>          http://www.celabo.org/
NTT/Verio SME          .     FreeBSD UNIX     .       Heimdal Kerberos
jvidrine@verio.net     .  nectar@FreeBSD.org  .          nectar@kth.se

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020930141623.GA18397>