From owner-freebsd-ports@FreeBSD.ORG Thu Oct 7 20:47:48 2010 Return-Path: Delivered-To: ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A27F7106564A for ; Thu, 7 Oct 2010 20:47:48 +0000 (UTC) (envelope-from stenn@ntp.org) Received: from mail1.ntp.org (mail1.ntp.org [IPv6:2001:4f8:fff7:1::5]) by mx1.freebsd.org (Postfix) with ESMTP id 859598FC16 for ; Thu, 7 Oct 2010 20:47:48 +0000 (UTC) Received: from [149.20.68.30] (helo=stenn.ntp.org) by mail1.ntp.org with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1P3xNG-00036V-BY; Thu, 07 Oct 2010 20:47:44 +0000 Received: from stenn.ntp.org (localhost.ntp.org [127.0.0.1]) by stenn.ntp.org (8.14.4/8.14.4) with ESMTP id o97KlYOR030025; Thu, 7 Oct 2010 13:47:34 -0700 (PDT) (envelope-from stenn@stenn.ntp.org) Message-Id: <201010072047.o97KlYOR030025@stenn.ntp.org> To: ports@freebsd.org From: Harlan Stenn X-Face: "csXK}xnnsH\h_ce`T#|pM]tG, 6Xu.{3Rb\]&XJgVyTS'w{E+|-(}n:c(Cc* $cbtusxDP6T)Hr'k&zrwq0.3&~bAI~YJco[r.mE+K|(q]F=ZNXug:s6tyOk{VTqARy0#axm6BWti9C d X-Mailer: MH-E 7.4.2; nmh 1.2; XEmacs 21.4 (patch 22) Mime-Version: 1.0 (generated by tm-edit 1.8) Content-Type: text/plain; charset=US-ASCII Date: Thu, 07 Oct 2010 13:47:34 -0700 X-SA-Exim-Connect-IP: 149.20.68.30 X-SA-Exim-Rcpt-To: stenn@ntp.org, ports@freebsd.org X-SA-Exim-Mail-From: stenn@ntp.org X-Spam-Checker-Version: SpamAssassin 3.3.0 (2010-01-18) on mail1.ntp.org X-Spam-Level: * X-Spam-Status: No, score=1.6 required=5.0 tests=BAYES_50,RDNS_NONE autolearn=no version=3.3.0 X-SA-Exim-Version: 4.2 X-SA-Exim-Scanned: Yes (on mail1.ntp.org) Cc: stenn@ntp.org Subject: horde-base? X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Oct 2010 20:47:48 -0000 Hi, I've seen the security alert for the current horde-base (3.3.8) port. It looks like 3.3.9 was released just over a week ago, and the release notes seem to indicate it fixes the security problems. I also see http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/151191, but I have no idea if that patch will actually fix the problem or not, or when that PR will be resolved. Should I just wait quietly, or is there a minimally-intrusive way I could figure out the timeline on these things? -- Harlan Stenn http://ntpforum.isc.org - be a member!