From owner-freebsd-x11@FreeBSD.ORG Wed Sep 15 15:40:18 2004 Return-Path: Delivered-To: freebsd-x11@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1CA2716A4CE; Wed, 15 Sep 2004 15:40:18 +0000 (GMT) Received: from gw.celabo.org (gw.celabo.org [208.42.49.153]) by mx1.FreeBSD.org (Postfix) with ESMTP id CBAEA43D1F; Wed, 15 Sep 2004 15:40:17 +0000 (GMT) (envelope-from nectar@celabo.org) Received: from localhost (localhost [127.0.0.1]) by gw.celabo.org (Postfix) with ESMTP id 2BD935488D; Wed, 15 Sep 2004 10:40:17 -0500 (CDT) Received: from gw.celabo.org ([127.0.0.1]) by localhost (hellblazer.celabo.org [127.0.0.1]) (amavisd-new, port 10024) with SMTP id 61314-10; Wed, 15 Sep 2004 10:40:06 -0500 (CDT) Received: from lum.celabo.org (dhcp-207.celabo.org [10.0.1.207]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "lum.celabo.org", Issuer "celabo.org CA" (verified OK)) by gw.celabo.org (Postfix) with ESMTP id 9CCE854861; Wed, 15 Sep 2004 10:40:03 -0500 (CDT) Received: by lum.celabo.org (Postfix, from userid 1001) id 5C72941E853; Wed, 15 Sep 2004 10:39:59 -0500 (CDT) Date: Wed, 15 Sep 2004 10:39:59 -0500 From: "Jacques A. Vidrine" To: lev@FreeBSD.org, x11@FreeBSD.org, maho@FreeBSD.org Message-ID: <20040915153959.GA4673@lum.celabo.org> Mail-Followup-To: "Jacques A. Vidrine" , lev@FreeBSD.org, x11@FreeBSD.org, maho@FreeBSD.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Url: http://www.celabo.org/ User-Agent: Mutt/1.5.6i Subject: xpm vulnerabilities X-BeenThere: freebsd-x11@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: X11 on FreeBSD -- maintaining and support List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Sep 2004 15:40:18 -0000 Hi Ports Maintainers! I am emailing you to bring your attention to serious vulnerabilities in libXpm. A port you maintain is believed to be affected. Please resolve the vulnerability if you can in whatever way possible (patches preferred to upgrades, I think). devel/agenda-snow-libs x11/libXpm math/mupad x11/XFree86-4-libraries x11/xorg-libraries graphics/xpm (ports@FreeBSD.org omittted) chinese/cle_base (ports@FreeBSD.org omitted) Please see http://vuxml.freebsd.org/ef253f8b-0727-11d9-b45d-000c41e2cdad.html for details. Cheers, -- Jacques A Vidrine / NTT/Verio nectar@celabo.org / jvidrine@verio.net / nectar@FreeBSD.org