Date: Sat, 24 Mar 2012 15:30:48 -0400 From: Jason Hellenthal <jhellenthal@dataix.net> To: Ryan Steinmetz <zi@freebsd.org> Cc: ports@freebsd.org, pav@freebsd.org, delphij@freebsd.org, novel@freebsd.org Subject: Re: security/gnutls update when... Message-ID: <20120324193048.GA30901@DataIX.net> In-Reply-To: <20120324175245.GA78438@fast.rit.edu> References: <20120324172937.GA43822@DataIX.net> <20120324175245.GA78438@fast.rit.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Mar 24, 2012 at 01:52:45PM -0400, Ryan Steinmetz wrote: > On (03/24/12 13:29), Jason Hellenthal wrote: > > > > Apparently this port has fell two versions behind. Is there anything > > that is going to happen to update it to the current stable version ? > > > > > > These advisories have been out for a week now. And the current version > > is 2.12.18. > > > > > > Database created: Sat Mar 24 13:15:03 EDT 2012 > > Affected package: gnutls-2.12.16 > > Type of problem: libtasn1 -- ASN.1 length decoding vulnerability. > > Reference: > > http://portaudit.FreeBSD.org/2e7e9072-73a0-11e1-a883-001cc0a36e12.html > > > > Affected package: gnutls-2.12.16 > > Type of problem: gnutls -- possible overflow/Denial of service > > vulnerabilities. > > Reference: > > http://portaudit.FreeBSD.org/aecee357-739e-11e1-a883-001cc0a36e12.html > > > > 2 problem(s) in your installed packages found. > > > > > > > > -- > > ;s =; > > Jason, > > There is an update in progress (ports/166307). There is a shared > library version bump that is part of the gnutls update and this requires > a little extra scrutiny. This, combined with the upcoming 8.3 RELEASE > is what is contributing to the delay. > Thanks Ryan. Not to sound hasty I realize the release is coming and thought that to be most of the reason as well the shared bump, but I have already had to deal with a few ramifications from rand(lusers); I appreciate the feedback, it gives me at least something to work with. Thanks again. -- ;s =;
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120324193048.GA30901>