From owner-freebsd-security@FreeBSD.ORG Mon Nov 24 14:56:41 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A39CB106564A; Mon, 24 Nov 2008 14:56:41 +0000 (UTC) (envelope-from amistry@am-productions.biz) Received: from mail.united-ware.com (am-productions.biz [69.61.164.22]) by mx1.freebsd.org (Postfix) with ESMTP id 5EA9F8FC16; Mon, 24 Nov 2008 14:56:41 +0000 (UTC) (envelope-from amistry@am-productions.biz) Received: from [192.168.1.100] (adsl-69-211-82-182.dsl.wotnoh.ameritech.net [69.211.82.182]) (authenticated bits=0) by mail.united-ware.com (8.14.2/8.14.2) with ESMTP id mAOF0ufG009894 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 24 Nov 2008 10:00:57 -0500 (EST) (envelope-from amistry@am-productions.biz) From: Anish Mistry Organization: AM Productions To: Eygene Ryabinkin Date: Mon, 24 Nov 2008 09:57:32 -0500 User-Agent: KMail/1.9.7 References: <20081123184449.6801AF181D@phoenix.codelabs.ru> <200811231446.43728.amistry@am-productions.biz> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart1436324.ylxnvIu4xE"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200811240957.33153.amistry@am-productions.biz> X-Virus-Scanned: ClamAV 0.94.1/8669/Mon Nov 24 03:21:48 2008 on mail.united-ware.com X-Virus-Status: Clean X-Mailman-Approved-At: Mon, 24 Nov 2008 15:08:35 +0000 Cc: freebsd-security@freebsd.org, bug-followup@freebsd.org Subject: Re: ports/129097: [vuxml] print/hplip: document CVE-2008-2940 and CVE-2008-2941 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Nov 2008 14:56:41 -0000 --nextPart1436324.ylxnvIu4xE Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Monday 24 November 2008, Eygene Ryabinkin wrote: > Anish, good day. > > That's fine, thanks. But yesterday I had sent a patch that fixes > the vulnerabilities for 2.8.2. What do you think about it? Could > you test the patch? The VuXML entry details depend on this: I > wrote that hplip >=3D 2.8.4 aren't vulnerable, but if you'll approve > the patch that upgrades to 2.8.2_3, then VuXML entry should be > corrected. > > Thanks again! =46inally got a around to it. The patches look fine, and it passed my=20 basic testing. Commit. Thanks, =2D-=20 Anish Mistry amistry@am-productions.biz AM Productions http://am-productions.biz/ --nextPart1436324.ylxnvIu4xE Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (FreeBSD) iEYEABECAAYFAkkqwN0ACgkQxqA5ziudZT2ADQCg0ICasZ0UzPreA5uQFVwi5YPX rbIAoM1e7bLqHyFWCierN86Ts3CmLpkg =KiT+ -----END PGP SIGNATURE----- --nextPart1436324.ylxnvIu4xE--