From owner-freebsd-gnome@FreeBSD.ORG  Mon Aug 29 20:50:10 2005
Return-Path: <owner-freebsd-gnome@FreeBSD.ORG>
X-Original-To: gnome@FreeBSD.org
Delivered-To: freebsd-gnome@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0D19B16A41F;
	Mon, 29 Aug 2005 20:50:10 +0000 (GMT)
	(envelope-from simon@zaphod.nitro.dk)
Received: from zaphod.nitro.dk (port324.ds1-khk.adsl.cybercity.dk
	[212.242.113.79])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9069E43D49;
	Mon, 29 Aug 2005 20:50:09 +0000 (GMT)
	(envelope-from simon@zaphod.nitro.dk)
Received: by zaphod.nitro.dk (Postfix, from userid 3000)
	id DE56911A5F; Mon, 29 Aug 2005 22:50:07 +0200 (CEST)
Date: Mon, 29 Aug 2005 22:50:07 +0200
From: "Simon L. Nielsen" <simon@FreeBSD.org>
To: Ade Lovett <ade@FreeBSD.org>
Message-ID: <20050829205006.GA858@zaphod.nitro.dk>
References: <20050827223220.GQ857@zaphod.nitro.dk>
	<C3A2EBF8-E0A9-4B2F-B7EA-6D08D7AC066C@FreeBSD.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="LZvS9be/3tNcYl/X"
Content-Disposition: inline
In-Reply-To: <C3A2EBF8-E0A9-4B2F-B7EA-6D08D7AC066C@FreeBSD.org>
User-Agent: Mutt/1.5.9i
Cc: gnome@FreeBSD.org
Subject: Re: Security vulnerability in evolution
X-BeenThere: freebsd-gnome@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: GNOME for FreeBSD -- porting and maintaining
	<freebsd-gnome.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-gnome>,
	<mailto:freebsd-gnome-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-gnome>
List-Post: <mailto:freebsd-gnome@freebsd.org>
List-Help: <mailto:freebsd-gnome-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-gnome>,
	<mailto:freebsd-gnome-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Aug 2005 20:50:10 -0000


--LZvS9be/3tNcYl/X
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2005.08.27 19:41:51 -0700, Ade Lovett wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>=20
>=20
> On Aug 27, 2005, at 15:32 , Simon L. Nielsen wrote:
>=20
> >Hello evolution maintainers,
> >
> >As recently documented in the FreeBSD VuXML document [1] there is a
> >security vulnerability in evolution.  This has been fixed in the
> >upstream version, 2.3.7, or it is possible to obtain backported
> >patches from other vendors, e.g. see [2].
> >
> >Please update the port as soon as possible.
>=20
> PORTNAME=3D       evolution
> PORTVERSION=3D    2.3.8
>=20
> is part of the impending gnome 2.12 release which will drop in some =20
> time shortly after 6.0-REL comes out (the wonders of 'conflicting' =20
> release schedules)

I see that marcus added a patch to the port (thanks!), so it is OK
now.  I just updated VuXML to note that the current port version is
fixed.

--=20
Simon L. Nielsen

--LZvS9be/3tNcYl/X
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (FreeBSD)

iD8DBQFDE3T+h9pcDSc1mlERAjE1AJwKPFjEyGdrap4y/yzjjUlFVkqvMwCgw1/q
rO7bY0NVXfoT0ksK9Gm+0gk=
=SJ9V
-----END PGP SIGNATURE-----

--LZvS9be/3tNcYl/X--