From owner-cvs-ports@FreeBSD.ORG Tue Aug 17 17:45:30 2010 Return-Path: Delivered-To: cvs-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 126D110656B0 for ; Tue, 17 Aug 2010 17:45:30 +0000 (UTC) (envelope-from dougb@FreeBSD.org) Received: from mail2.fluidhosting.com (mx21.fluidhosting.com [204.14.89.4]) by mx1.freebsd.org (Postfix) with ESMTP id AE19C8FC26 for ; Tue, 17 Aug 2010 17:45:29 +0000 (UTC) Received: (qmail 13264 invoked by uid 399); 17 Aug 2010 17:45:28 -0000 Received: from localhost (HELO lap.dougb.net) (dougb@dougbarton.us@127.0.0.1) by localhost with ESMTPAM; 17 Aug 2010 17:45:28 -0000 X-Originating-IP: 127.0.0.1 X-Sender: dougb@dougbarton.us Message-ID: <4C6ACAB7.7040701@FreeBSD.org> Date: Tue, 17 Aug 2010 10:45:27 -0700 From: Doug Barton Organization: http://SupersetSolutions.com/ User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.9.2.8) Gecko/20100807 Thunderbird/3.1.2 MIME-Version: 1.0 To: Wesley Shields References: <201008171304.o7HD4Qni030189@repoman.freebsd.org> <20100817131333.GB86627@atarininja.org> <20100817143634.GC86627@atarininja.org> In-Reply-To: <20100817143634.GC86627@atarininja.org> X-Enigmail-Version: 1.1.2 OpenPGP: id=1A1ABC84 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Cc: cvs-ports@freebsd.org, Baptiste Daroussin , ports-committers@freebsd.org, cvs-all@freebsd.org, tabthorpe@freebsd.org Subject: Re: cvs commit: ports MOVED ports/security Makefile ports/security/isolate Makefile distinfo pkg-descr X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Aug 2010 17:45:30 -0000 On 08/17/2010 07:36, Wesley Shields wrote: > On Tue, Aug 17, 2010 at 02:24:16PM +0000, Baptiste Daroussin wrote: >> 2010/8/17 Wesley Shields: >>> On Tue, Aug 17, 2010 at 01:04:26PM +0000, Baptiste Daroussin wrote: >>>> bapt ? ? ? ?2010-08-17 13:04:26 UTC >>>> >>>> ? FreeBSD ports repository >>>> >>>> ? Modified files: >>>> ? ? . ? ? ? ? ? ? ? ? ? ?MOVED >>>> ? ? security ? ? ? ? ? ? Makefile >>>> ? Removed files: >>>> ? ? security/isolate ? ? Makefile distinfo pkg-descr >>>> ? Log: >>>> ? Security vulnerability: local root privileges escalation problems >>> >>> Wow, this seems a little excessive to me. Why was this removed? Is >>> upstream not going to fix the problem(s)? Isn't marking it broken and a >>> vuxml entry enough while we give them time to address the problems? >>> >>> -- WXS >>> >> >> Sorry my log wasn't descriptive enough. Upstream asked me to remove >> the ports, so did the maintainer. >> >> Also upstream removed the google code page for the project and >> currently doesn't plan a fix. >> >> I'll try to make better commit log next time. > > I was just curious because this seemed like a knee-jerk reaction on > our part. Turns out that it was directed by upstream and maintainer, > which is completely understandable. I was merely trying to make sure we > avoid knee-jerk reactions. Thank you for the clarification. IMO a forced commit to indicate this is justified here. -- Improve the effectiveness of your Internet presence with a domain name makeover! http://SupersetSolutions.com/ Computers are useless. They can only give you answers. -- Pablo Picasso