From owner-cvs-all@FreeBSD.ORG Tue Aug 17 14:36:35 2010 Return-Path: Delivered-To: cvs-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9C194106564A; Tue, 17 Aug 2010 14:36:35 +0000 (UTC) (envelope-from wxs@atarininja.org) Received: from syn.atarininja.org (syn.csh.rit.edu [129.21.50.215]) by mx1.freebsd.org (Postfix) with ESMTP id 2CE4C8FC0A; Tue, 17 Aug 2010 14:36:35 +0000 (UTC) Received: by syn.atarininja.org (Postfix, from userid 1001) id 91B6D5C3E; Tue, 17 Aug 2010 10:36:34 -0400 (EDT) Date: Tue, 17 Aug 2010 10:36:34 -0400 From: Wesley Shields To: Baptiste Daroussin Message-ID: <20100817143634.GC86627@atarininja.org> References: <201008171304.o7HD4Qni030189@repoman.freebsd.org> <20100817131333.GB86627@atarininja.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.20 (2009-06-14) Cc: cvs-ports@freebsd.org, ports-committers@freebsd.org, cvs-all@freebsd.org, tabthorpe@freebsd.org Subject: Re: cvs commit: ports MOVED ports/security Makefile ports/security/isolate Makefile distinfo pkg-descr X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Aug 2010 14:36:35 -0000 On Tue, Aug 17, 2010 at 02:24:16PM +0000, Baptiste Daroussin wrote: > 2010/8/17 Wesley Shields : > > On Tue, Aug 17, 2010 at 01:04:26PM +0000, Baptiste Daroussin wrote: > >> bapt ? ? ? ?2010-08-17 13:04:26 UTC > >> > >> ? FreeBSD ports repository > >> > >> ? Modified files: > >> ? ? . ? ? ? ? ? ? ? ? ? ?MOVED > >> ? ? security ? ? ? ? ? ? Makefile > >> ? Removed files: > >> ? ? security/isolate ? ? Makefile distinfo pkg-descr > >> ? Log: > >> ? Security vulnerability: local root privileges escalation problems > > > > Wow, this seems a little excessive to me. Why was this removed? Is > > upstream not going to fix the problem(s)? Isn't marking it broken and a > > vuxml entry enough while we give them time to address the problems? > > > > -- WXS > > > > Sorry my log wasn't descriptive enough. Upstream asked me to remove > the ports, so did the maintainer. > > Also upstream removed the google code page for the project and > currently doesn't plan a fix. > > I'll try to make better commit log next time. I was just curious because this seemed like a knee-jerk reaction on our part. Turns out that it was directed by upstream and maintainer, which is completely understandable. I was merely trying to make sure we avoid knee-jerk reactions. Thank you for the clarification. -- WXS