From owner-freebsd-security@FreeBSD.ORG Wed Sep 15 09:34:11 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B6E5616A4F3 for ; Wed, 15 Sep 2004 09:34:11 +0000 (GMT) Received: from mail04.syd.optusnet.com.au (mail04.syd.optusnet.com.au [211.29.132.185]) by mx1.FreeBSD.org (Postfix) with ESMTP id D3B5D43D1D for ; Wed, 15 Sep 2004 09:34:10 +0000 (GMT) (envelope-from PeterJeremy@optushome.com.au) Received: from cirb503493.alcatel.com.au (c211-30-75-229.belrs2.nsw.optusnet.com.au [211.30.75.229]) i8F9Y8HE010013 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO); Wed, 15 Sep 2004 19:34:09 +1000 Received: from cirb503493.alcatel.com.au (localhost.alcatel.com.au [127.0.0.1])i8F9Y7xP087352; Wed, 15 Sep 2004 19:34:07 +1000 (EST) (envelope-from pjeremy@cirb503493.alcatel.com.au) Received: (from pjeremy@localhost)i8F9Y7QQ087351; Wed, 15 Sep 2004 19:34:07 +1000 (EST) (envelope-from pjeremy) Date: Wed, 15 Sep 2004 19:34:07 +1000 From: Peter Jeremy To: Dan Langille Message-ID: <20040915093407.GA83620@cirb503493.alcatel.com.au> References: <20040913223543.GA28187@eagle.aitken.com> <4146C419.5115.1E9B43B2@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4146C419.5115.1E9B43B2@localhost> User-Agent: Mutt/1.4.2i cc: freebsd-security@freebsd.org Subject: Re: Kerberos 5 Security Alert? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Sep 2004 09:34:11 -0000 On Tue, 2004-Sep-14 10:12:41 -0400, Dan Langille wrote: >On 14 Sep 2004 at 14:15, Matthew Seaman wrote: > >> I happen to know that the VuXML data will be appearing in a future >> release of the freshports.org site as well. > >Matthew knows this because he wrote the code which parses >ports/security/vuxml/vuln.xml for FreshPorts. I then amended his >work to insert the parsed VuXML data into the FreshPorts database. > >This page shows what VuXML flagged commits will look like: > > http://beta.freshports.org/ftp/tnftpd/ > >The above relates to http://www.vuxml.org/freebsd/c4b025bb-f05d-11d8- >9837-000c41e2cdad.html I presume you're referring to the skulls against the version number rather than the message: "ERROR: permission denied for relation ports_active SELECT id AS slave_port_id, name AS slave_port_name, category_id AS slave_category_id, category AS slave_category_name FROM ports_active WHERE master_port = 'ftp/tnftpd' ORDER BY slave_category_name, slave_port_name" -- Peter Jeremy