Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 19 Mar 1999 11:58:29 -0800 (PST)
From:      patl@phoenix.volant.org
To:        "Harry M. Leitzell" <Harry_M_Leitzell@cmu.edu>
Cc:        freebsd-security@freebsd.org
Subject:   Re: 3.1-RELEASE
Message-ID:  <ML-3.3.921873509.9983.patl@asimov>
In-Reply-To: <Pine.SOL.3.96L.990319134429.7811A-100000@unix13.andrew.cmu.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
>      I am just curious as to who updates the ports for the RELEASEs.
> It seems when I was installing 3.1 on a friends machine yesterday and went
> to install an ftp daemon, I ended up using the ports to install proftpd.
> The only problem with this is that the ports collection installed pre1
> which has a known buffer overflow in it.  Maybe I am wrong in assuming
> this is a bad thing ... but shouldn't someone be checking and updating
> things like this?

I suspect that pre1 was the most current version when the ports tree
was frozen for 3.1-RELEASE.  If you install the 3.1->current package
(from the Web/FTP site) and then CVSup ports, you will find that it
is now using pre2.  (And has been since at least the end of February.)



-Pat


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ML-3.3.921873509.9983.patl>