Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 27 May 2003 12:31:46 +0400
From:      "Sergey A. Osokin" <osa@freebsd.org.ru>
To:        Tom Parquette <tparquet@twcny.rr.com>
Cc:        ports@FreeBSD.ORG
Subject:   Re: Setiathome 3.08
Message-ID:  <20030527083146.GW1120@freebsd.org.ru>
In-Reply-To: <3ED2E3D6.9030007@twcny.rr.com>
References:  <3ED2E3D6.9030007@twcny.rr.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, May 27, 2003 at 12:04:38AM -0400, Tom Parquette wrote:
> Hi, Please CC me.  I don't subscribe to ports.  TIA.
> I've been watching the astro/setiathome port since the buffer overflow 
> exploit was found and the port marked forbidden.
> Setiathome 3.08 states it fixes the exploit and it appears to be 
> available on the Setiathome web site.  I don't know how long it has been 
> available.
> The FBSD port, as of my last cvsup 5 minutes ago, still shows Version 3.03.
> Any idea when the port might be upgraded?
> Cheers...

Ports are freezed at this time.

BTW ports/astro/Makefile already containes a string
.if ${PORTVERSION} == "3.03"
FORBIDDEN=      'Exploitable buffer overflow. http://spoor12.edup.tudelft.nl/'
.endif

-- 

Rgdz,                        /"\  ASCII RIBBON CAMPAIGN
Sergey Osokin aka oZZ,       \ /    AGAINST HTML MAIL
http://ozz.pp.ru/             X          AND NEWS
                             / \



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030527083146.GW1120>