From owner-cvs-ports@FreeBSD.ORG Thu Dec 11 11:30:45 2003 Return-Path: Delivered-To: cvs-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E385A16A4CE; Thu, 11 Dec 2003 11:30:45 -0800 (PST) Received: from nagual.pp.ru (pobrecita.freebsd.ru [194.87.13.42]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3D8CB43D2C; Thu, 11 Dec 2003 11:30:43 -0800 (PST) (envelope-from ache@pobrecita.freebsd.ru) Received: from pobrecita.freebsd.ru (ache@localhost [127.0.0.1]) by nagual.pp.ru (8.12.10/8.12.10) with ESMTP id hBBJUgCG077285; Thu, 11 Dec 2003 22:30:42 +0300 (MSK) (envelope-from ache@pobrecita.freebsd.ru) Received: (from ache@localhost) by pobrecita.freebsd.ru (8.12.10/8.12.10/Submit) id hBBJUgQo077284; Thu, 11 Dec 2003 22:30:42 +0300 (MSK) (envelope-from ache) Date: Thu, 11 Dec 2003 22:30:42 +0300 From: Andrey Chernov To: Joe Marcus Clarke Message-ID: <20031211193042.GB77158@nagual.pp.ru> Mail-Followup-To: Andrey Chernov , Joe Marcus Clarke , ports-committers@FreeBSD.ORG, cvs-ports@FreeBSD.ORG, cvs-all@FreeBSD.ORG References: <200312111649.hBBGnQvW027710@repoman.freebsd.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200312111649.hBBGnQvW027710@repoman.freebsd.org> User-Agent: Mutt/1.5.4i cc: cvs-ports@FreeBSD.ORG cc: cvs-all@FreeBSD.ORG cc: ports-committers@FreeBSD.ORG Subject: Re: cvs commit: ports/mail/popper Makefile X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Dec 2003 19:30:46 -0000 On Thu, Dec 11, 2003 at 08:49:26AM -0800, Joe Marcus Clarke wrote: > marcus 2003/12/11 08:49:26 PST > > FreeBSD ports repository > > Modified files: > mail/popper Makefile > Log: > With my portmgr hat on, mark this port FORBIDDEN as it contains a remotely > exploitable privilege escalation vulnerability. See > http://www.eudora.com/qpopper/#BUFFER for more details. Please back it out. URL you mention means unmodified original version. See our local patches. -- Andrey Chernov | http://ache.pp.ru/