From owner-freebsd-ports@FreeBSD.ORG  Thu Jan 27 04:56:59 2005
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Delivered-To: freebsd-ports@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 17E3C16A4CE
	for <ports@FreeBSD.org>; Thu, 27 Jan 2005 04:56:59 +0000 (GMT)
Received: from thunderbolt.lightningfire.net (thunderbolt.lightningfire.net
	[63.204.212.157])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A810543D1D
	for <ports@FreeBSD.org>; Thu, 27 Jan 2005 04:56:58 +0000 (GMT)
	(envelope-from webmaster@lightningfire.net)
Received: from [192.168.0.101] (adsl-63-199-31-245.dsl.snfc21.pacbell.net
	[63.199.31.245])	(authenticated bits=0)j0R4ulgx073002
	(version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NO);
	Wed, 26 Jan 2005 20:56:48 -0800 (PST)
	(envelope-from webmaster@lightningfire.net)
In-Reply-To: <41F71C20.4080002@covad.net>
References: <41F00880.2050506@covad.net> <41F71C20.4080002@covad.net>
Mime-Version: 1.0 (Apple Message framework v619)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <D7BAE338-701F-11D9-ABF5-000A95B48FF8@lightningfire.net>
Content-Transfer-Encoding: 7bit
From: Chris Stuart <webmaster@lightningfire.net>
Date: Wed, 26 Jan 2005 20:56:44 -0800
To: Joe Zeiler <zeiler07@covad.net>
X-Mailer: Apple Mail (2.619)
X-Virus-Scanned: by amavisd-new
cc: ports@FreeBSD.org
Subject: Re: FreeBSD Port: awstats-6.2
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Jan 2005 04:56:59 -0000

Joe,

On Jan 25, 2005, at 8:27 PM, Joe Zeiler wrote:

> - snip -
> Port Maintainer, this is a security update, all you have to do is make 
> the changes I have given you, why won't you do this simple task?
>

The problem with upgrading to 6.3 is that it's development, and while 
it might be stable it isn't generally good practice to upgrade a 
production release port to a development set of code. Also, with it 
being development the tarball can be rerolled causing the port not to 
build as well, it's quite possible that that tarball is being built 
nightly.

The fix to the port is going to be, apply the patch from: 
http://marc.theaimsgroup.com/?l=full-disclosure&m=110600949323439 and 
bumping the port revision. As soon as 6.3 has been released it will be 
upgraded too.

I will try to get it patched to use the above patch within the next day 
or so, but I'm on a couple of deadlines at the moment.

Thanks,

Chris.