Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 5 May 2017 21:46:39 +0200
From:      Jason de Cordoba <jason@aventia.pw>
To:        jkim@FreeBSD.org
Cc:        office@FreeBSD.org
Subject:   FreeBSD Port: devel/icu icu-58.2_2,1 is vulnerable:
Message-ID:  <2132c682-c881-369e-21e8-81182d715d53@aventia.pw>

next in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--peCIIC07DhnLejO0WxB80jHE93v6FftRl
Content-Type: multipart/mixed; boundary="qo3sIH4tLsaa3OjxdclAdRGfx71Jm5enc";
 protected-headers="v1"
From: Jason de Cordoba <jason@aventia.pw>
To: jkim@FreeBSD.org
Cc: office@FreeBSD.org
Message-ID: <2132c682-c881-369e-21e8-81182d715d53@aventia.pw>
Subject: FreeBSD Port: devel/icu icu-58.2_2,1 is vulnerable:

--qo3sIH4tLsaa3OjxdclAdRGfx71Jm5enc
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi there,

encountered a stop on upgrading icu which was updated today in ports on
fbsd11.0p9

It appears the icu 58.2_2,1 is also vulnerable?
http://www.freshports.org/devel/icu/
http://www.freshports.org/commit.php?category=3Ddevel&port=3Dicu&files=3D=
yes&message_id=3D201705042144.v44LivS4081269@repo.freebsd.org

Thanks,
Jason

    =3D=3D=3D>>> All >> icu-58.2_1,1 (2/10)

    =3D=3D=3D>  Cleaning for icu-58.2_2,1
    =3D=3D=3D>  icu-58.2_2,1 has known vulnerabilities:
    icu-58.2_2,1 is vulnerable:
    icu -- multiple vulnerabilities
    CVE: CVE-2017-7868
    CVE: CVE-2017-7867
    WWW:
    https://vuxml.FreeBSD.org/freebsd/607f8b57-7454-42c6-a88a-8706f327076=
d.html


--qo3sIH4tLsaa3OjxdclAdRGfx71Jm5enc--

--peCIIC07DhnLejO0WxB80jHE93v6FftRl
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=WU2F
-----END PGP SIGNATURE-----

--peCIIC07DhnLejO0WxB80jHE93v6FftRl--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2132c682-c881-369e-21e8-81182d715d53>