From owner-freebsd-ports@FreeBSD.ORG  Tue Nov 16 14:12:46 2004
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Delivered-To: freebsd-ports@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 63CB916A4CE
	for <freebsd-ports@freebsd.org>; Tue, 16 Nov 2004 14:12:46 +0000 (GMT)
Received: from mail.gmx.net (pop.gmx.de [213.165.64.20])
	by mx1.FreeBSD.org (Postfix) with SMTP id 3581743D46
	for <freebsd-ports@freebsd.org>; Tue, 16 Nov 2004 14:12:45 +0000 (GMT)
	(envelope-from michaelnottebrock@gmx.net)
Received: (qmail 31150 invoked by uid 65534); 16 Nov 2004 14:12:44 -0000
Received: from pD955F963.dip.t-dialin.net (EHLO lofi.dyndns.org)
	(217.85.249.99)
	by mail.gmx.net (mp018) with SMTP; 16 Nov 2004 15:12:43 +0100
X-Authenticated: #443188
Received: from [192.168.8.4] (lofi@kiste.my.domain [192.168.8.4])
	(authenticated bits=0)
	by lofi.dyndns.org (8.12.10/8.12.10) with ESMTP id iAGECd8m034027
	(version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO);
	Tue, 16 Nov 2004 15:12:39 +0100 (CET)
	(envelope-from michaelnottebrock@gmx.net)
From: Michael Nottebrock <michaelnottebrock@gmx.net>
To: freebsd-ports@freebsd.org
Date: Tue, 16 Nov 2004 15:12:37 +0100
User-Agent: KMail/1.7.1
References: <BDBFC2F5.1063A%tomonage2@gmx.de>
In-Reply-To: <BDBFC2F5.1063A%tomonage2@gmx.de>
MIME-Version: 1.0
Content-Type: multipart/signed;
  boundary="nextPart3756929.Z1OLWJoSlo";
  protocol="application/pgp-signature";
  micalg=pgp-sha1
Content-Transfer-Encoding: 7bit
Message-Id: <200411161512.38168.michaelnottebrock@gmx.net>
X-Virus-Scanned: by amavisd-new
cc: Jonathan Weiss <tomonage2@gmx.de>
cc: security@freebsd.org
Subject: Re: Problem with cups/xpdf
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Nov 2004 14:12:46 -0000

--nextPart3756929.Z1OLWJoSlo
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Tuesday, 16. November 2004 14:45, Jonathan Weiss wrote:
> Cheers,
>
>
>
> I am trying to upgrade my cups-port with an up-to-date ports-tree. It fai=
ls
> because of the xpdf-vulnurability. But my xpdf-port is the most recent one
> and I think that the vulnurability was handelt in this version (if I can
> believ the cvs-comment).
>
> =3D=3D=3D>  cups-base-1.1.22.0 has known vulnerabilities:
> >> xpdf -- integer overflow vulnerabilities.
>
>    Reference:
> <http://www.FreeBSD.org/ports/portaudit/ad2f3337-26bf-11d9-9289-000c41e2c=
da
>d .html>

The vuxml entry is wrong, vid ad2f3337-26bf-11d9-9289-000c41e2cdad has=20
<range><ge>0</ge></range> but needs <range><lt>1.1.21</lt></range>.

Security Team cc'd.

=2D-=20
   ,_,   | Michael Nottebrock               | lofi@freebsd.org
 (/^ ^\) | FreeBSD - The Power to Serve     | http://www.freebsd.org
   \u/   | K Desktop Environment on FreeBSD | http://freebsd.kde.org

--nextPart3756929.Z1OLWJoSlo
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)

iD8DBQBBmgrWXhc68WspdLARAmtqAKCaz+a/4hlXqgixpcjbyP+G6R9JUgCgmR4r
BN0borqpOjhTyKr1NLnLgMM=
=DZXJ
-----END PGP SIGNATURE-----

--nextPart3756929.Z1OLWJoSlo--