From owner-freebsd-ports@FreeBSD.ORG  Wed Apr 30 01:44:15 2008
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Delivered-To: freebsd-ports@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id A1C921065678
	for <freebsd-ports@freebsd.org>; Wed, 30 Apr 2008 01:44:15 +0000 (UTC)
	(envelope-from frank_s@bellsouth.net)
Received: from fmailhost01.isp.att.net (fmailhost04.isp.att.net
	[204.127.217.104])
	by mx1.freebsd.org (Postfix) with ESMTP id 9186E8FC13
	for <freebsd-ports@freebsd.org>; Wed, 30 Apr 2008 01:44:15 +0000 (UTC)
	(envelope-from frank_s@bellsouth.net)
Received: from ace.nina.org (adsl-178-46-95.gnv.bellsouth.net[74.178.46.95])
	by isp.att.net (frfwmhc04) with SMTP
	id <20080430014413H040023nv4e>; Wed, 30 Apr 2008 01:44:14 +0000
X-Originating-IP: [74.178.46.95]
Date: Tue, 29 Apr 2008 21:44:11 -0400 (EDT)
From: Frank <frank_s@bellsouth.net>
X-X-Sender: frank_s@Ace.nina.org
To: Lowell Gilbert <freebsd-ports-local@be-well.ilk.org>
In-Reply-To: <44fxt4azyy.fsf@Lowell-Desk.lan>
Message-ID: <20080429214050.L1229@Ace.nina.org>
References: <20080429205639.F1229@Ace.nina.org>
	<44fxt4azyy.fsf@Lowell-Desk.lan>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: freebsd-ports@freebsd.org
Subject: Re: Failed upgrade of png
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Apr 2008 01:44:15 -0000

On Tue, 29 Apr 2008, Lowell Gilbert wrote:

> Frank <frank_s@bellsouth.net> writes:
>
>> The advisory affects png < 1.2.7 so why do I get this?
>
> Because the problem is multimedia/avifile,
> not graphics/png?

Not according to the error message.

===>  png-1.2.27 has known vulnerabilities:
=> png -- unknown chunk processing uninitialized memory access.
    Reference: 
<http://www.FreeBSD.org/ports/portaudit/57c705d6-12ae-11dd-bab7-0016179b2dd5.html>

and

         - multimedia/avifile (marked as IGNORE)                 <- IGNORE
         ! graphics/png (png-1.2.26)     (unknown build error)   <- build error
         * print/ghostscript-gpl (ghostscript-gpl-8.61_4)
         * graphics/ImageMagick (ImageMagick-6.3.6.9)

Thanks for the reply, though.
--
Frank