From owner-cvs-ports@FreeBSD.ORG Thu May 3 23:16:24 2012 Return-Path: Delivered-To: cvs-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 41F131065673; Thu, 3 May 2012 23:16:24 +0000 (UTC) (envelope-from takatsu.tomonari@gmail.com) Received: from mail-wg0-f50.google.com (mail-wg0-f50.google.com [74.125.82.50]) by mx1.freebsd.org (Postfix) with ESMTP id F2B998FC17; Thu, 3 May 2012 23:16:22 +0000 (UTC) Received: by wgbds12 with SMTP id ds12so2206073wgb.31 for ; Thu, 03 May 2012 16:16:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=HKLmG0gXLZ+bJ4Uahg0xHTR/EKolz1nPoJkSogHNE8k=; b=0sdQ3LlRReVDBw2zQwouYR+OuHLn/OgQXz9yU++Ad/Wo9l8U8x4QPdl4sYM5Rrhj9s dK1CeVUMfAvYtpn1pwpXrcMiLvjxvVr4l1FgISj3y84oJpFbEgaDrLCaOjcaaRkmup20 azd31t1++UjoSsETG4rgN18/JFNeTsIwIuekDpNp6UdRjEz0ziDtnJb2bANqwlkPrSlg DfUymeAFMAbB8a5jMnSaZJoKxwybDYX69D9tlTGQX3FCs4Ghd9/JbqYHsYKeISbuUvYf SlJ3K6F1aTEckEgEvgvVSGy07dMuuC/N1r/DLaKSb37QIfA+XO7AmPiDvUMI56mEOxBz HnQQ== MIME-Version: 1.0 Received: by 10.216.139.12 with SMTP id b12mr2598256wej.4.1336086976255; Thu, 03 May 2012 16:16:16 -0700 (PDT) Sender: takatsu.tomonari@gmail.com Received: by 10.223.114.140 with HTTP; Thu, 3 May 2012 16:16:16 -0700 (PDT) In-Reply-To: References: <201205020257.q422vjf9029468@repoman.freebsd.org> <20120503.194850.619112453467893578.hrs@allbsd.org> Date: Fri, 4 May 2012 08:16:16 +0900 X-Google-Sender-Auth: L7AuLFKhlWkQ1Ucre0oSLXIY0Yk Message-ID: From: TAKATSU Tomonari To: Hiroki Sato , Eitan Adler Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: ports-security@freebsd.org, cvs-ports@freebsd.org, cvs-all@freebsd.org, ports-committers@freebsd.org Subject: Re: cvs commit: ports/japanese Makefile ports/japanese/font-ricty Makefile distinfo pkg-descr pkg-plist ports/japanese/font-ricty/files 20-unhint-ricty.conf 20-unhint-rictydiscord.conf 62-fonts-ricty.conf 62-fonts-rictydiscord.conf pkg-install.in X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 May 2012 23:16:24 -0000 2012/5/4 Eitan Adler : > On 3 May 2012 06:48, Hiroki Sato wrote: >> =A0Please do not create do-fetch target in this way because it bypasses >> =A0the distinfo checksum. =A0Also, this port should have NO_PACKAGE >> =A0because redistribution of the generated font files is not allowed by >> =A0the license. Hiroki Sato-san, Thank you for pointing out my mistakes. > Yes, this is a security risk and should be fixed as fast as possible. Eitan Adler-san, Thank you for your advice about security risk. Regards, --=20 TAKATSU Tomonari