From owner-freebsd-ports@FreeBSD.ORG Sat Jul 10 22:52:03 2004 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1968B16A4CE for ; Sat, 10 Jul 2004 22:52:03 +0000 (GMT) Received: from bsd.hu (bsd.kvk.bmf.hu [193.224.40.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7642B43D2D for ; Sat, 10 Jul 2004 22:52:02 +0000 (GMT) (envelope-from robert@bsd.hu) Received: from localhost (localhost [127.0.0.1]) by bsd.hu (Postfix) with ESMTP id E8EDA73EE9 for ; Sun, 11 Jul 2004 00:55:18 +0200 (CEST) Received: from bsd.hu ([127.0.0.1]) by localhost (bsd.hu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 06869-02 for ; Sun, 11 Jul 2004 00:55:18 +0200 (CEST) Received: by bsd.hu (Postfix, from userid 1001) id 08AA873EEA; Sun, 11 Jul 2004 00:55:17 +0200 (CEST) Date: Sun, 11 Jul 2004 00:55:17 +0200 From: Robert Nagy To: freebsd-ports@freebsd.org Message-ID: <20040710225517.GA29368@enterprise.hu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.2i Subject: about ethereal and security fixes X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Jul 2004 22:52:03 -0000 Hi. I've a little question about ethereal. Now that the have released ethereal-0.10.5 which is a security fix. They previus release 0.10.4 was a security fix too. If you check http://portsmon.firepipe.net/portoverview.py?category=&portname=ethereal you can see that there are two PRs about it. #66766 Mon May 17 10:40:00 PDT 2004 #68819 Thu Jul 08 14:20:24 GMT 2004 The second is only two days old, but the first one was submitted in May! It was assigned to the maintainer (billf@freebsd.org). But the port is till at version 0.10.3. I wonder why the others don't care of this. I don't know how many other port suffer from this, but this is not a good state. If the maintiner is a slacker, please go and commit it with a "maintiner timeout" note. Come on! Security fixes are important. Thanks. __ Robert Nagy