Date: Thu, 5 Aug 2004 14:30:24 -0700 From: Kent Stewart <kstewart@owt.com> To: cvs-all@freebsd.org Cc: cvs-ports@freebsd.org Subject: Re: cvs commit: ports/www/linux-opera Makefile distinfo pkg-message ports/www/linux-opera/files patch-locale::en::search.ini patch-search.ini ports/www/opera Makefile distinfo ports/www/opera/files patch-locale::en::search.ini patch-search.ini Message-ID: <200408051430.24151.kstewart@owt.com> In-Reply-To: <86isbxxp1x.wl%sf@FreeBSD.org> References: <200408051711.i75HBZDs076858@repoman.freebsd.org> <opsb9w6poj9aq2h7@mezz> <86isbxxp1x.wl%sf@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thursday 05 August 2004 02:17 pm, FUJISHIMA Satsuki wrote: > At Thu, 05 Aug 2004 14:17:03 -0500, > > Jeremy Messenger wrote: > > > This version is still linked statically with vulnerable libpng. > > > > Is there any proof of test that it's has the same vulnerable in > > (linux-)opera? > > $ linux-opera http://scary.beasts.org/misc/pngtest_bad.png > > It looks like vulnerable too. I think all that means is that you didn't portupgrade -rf png png-1.2.5_8 is supposed to produce an error but not crash what ever you are using. Kent -- Kent Stewart Richland, WA http://users.owt.com/kstewart/index.html
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200408051430.24151.kstewart>