From owner-freebsd-ports@FreeBSD.ORG  Fri Jun 20 11:55:17 2008
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Delivered-To: ports@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 111D31065678
	for <ports@freebsd.org>; Fri, 20 Jun 2008 11:55:17 +0000 (UTC)
	(envelope-from r.c.ladan@gmail.com)
Received: from yx-out-2324.google.com (yx-out-2324.google.com [74.125.44.28])
	by mx1.freebsd.org (Postfix) with ESMTP id BF6438FC27
	for <ports@freebsd.org>; Fri, 20 Jun 2008 11:55:16 +0000 (UTC)
	(envelope-from r.c.ladan@gmail.com)
Received: by yx-out-2324.google.com with SMTP id 31so203462yxl.13
	for <ports@freebsd.org>; Fri, 20 Jun 2008 04:55:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:received:received:message-id:date:from:to
	:subject:cc:in-reply-to:mime-version:content-type
	:content-transfer-encoding:content-disposition:references;
	bh=A7J7CXpnV+VOGFE2GvQw+rdk5XGdATMdHdtrVN7LVYs=;
	b=T2KB2MTimuMkudGipgALrCGVBk1AxjIaDY0pB0folIvp0f8U5cCfgRJRASM8JsLEnc
	76k7xizRZMkDh06IfQ+Fe6cCJuG/ElqSsVY0ZQDKpS7atmJ+Fn6hpb9m4LirFf1VnUNM
	xK4kAr52WQoqeFnNLCI53hHjMEmCc7l3xVbj4=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=message-id:date:from:to:subject:cc:in-reply-to:mime-version
	:content-type:content-transfer-encoding:content-disposition
	:references;
	b=Yb0TkKzL6nVAX2fwLFVS3ADt2c7IclMOlSuMV1mBS3EdGIoiCu1EzACXI53GBBq06a
	KlSc2RqJu8UQnnyBwjpZ6BlMBOMbA0Fg3SRoTaQNyE0hpGUj1Fp2G9iDBT2ZJhoMAOR2
	ADKok7Mq6zYhyHDjvF9qFFcRfTQ/PHWenNPgI=
Received: by 10.151.155.5 with SMTP id h5mr153307ybo.178.1213961407494;
	Fri, 20 Jun 2008 04:30:07 -0700 (PDT)
Received: by 10.150.229.18 with HTTP; Fri, 20 Jun 2008 04:30:07 -0700 (PDT)
Message-ID: <e890cae60806200430i27a1b0c9wce0dcadeb41dfd9a@mail.gmail.com>
Date: Fri, 20 Jun 2008 13:30:07 +0200
From: "Rene Ladan" <r.c.ladan@gmail.com>
To: "Jeremy Messenger" <mezz7@cox.net>
In-Reply-To: <op.ucxiscyq9aq2h7@mezz.mezzweb.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <op.ucxiscyq9aq2h7@mezz.mezzweb.com>
Cc: gnome@freebsd.org, ports@freebsd.org, marcuscom-devel@marcuscom.com
Subject: Re: CALL FOR TEST: Updates to pixmap, cairo, poppler,
	and firefox 3.0!
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jun 2008 11:55:17 -0000

2008/6/18 Jeremy Messenger <mezz7@cox.net>:
> Hello folks,
>
[...]
> x11/pixman: Update to 0.10.0
[...]
> graphics/cairo: Update to 1.6.4
[...]
> graphics/poppler: Update to 0.8.3
[...]
> www/firefox3: Update to 3.0 final
>
[...]

I saw this in the daily security check:

> Affected package: firefox-3.0_1,1
> Type of problem: mozilla -- multiple vulnerabilities.
> Reference: <http://www.FreeBSD.org/ports/portaudit/e190ca65-3636-11dc-a697-000c6ec775d9.html>

Is this a false positive?  It seems to affect firefox >3.*,1 but the
CVE entries say it is fixed in firefox 2.0.0.5

Rene
-- 
http://www.rene-ladan.nl/

GPG fingerprint = E738 5471 D185 7013 0EE0 4FC8 3C1D 6F83 12E1 84F6
(subkeys.pgp.net)