From owner-freebsd-vuxml@FreeBSD.ORG Wed Oct 6 00:03:02 2004 Return-Path: Delivered-To: freebsd-vuxml@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id AB25B16A4D0; Wed, 6 Oct 2004 00:03:02 +0000 (GMT) Received: from bast.unixathome.org (bast.unixathome.org [66.11.174.150]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8330443D45; Wed, 6 Oct 2004 00:03:02 +0000 (GMT) (envelope-from dan@langille.org) Received: from xeon (xeon.unixathome.org [192.168.0.18]) by bast.unixathome.org (Postfix) with ESMTP id 8FCC43D3C; Tue, 5 Oct 2004 20:02:51 -0400 (EDT) Date: Tue, 5 Oct 2004 20:02:51 -0400 (EDT) From: Dan Langille X-X-Sender: dan@xeon.unixathome.org To: Jacques Vidrine In-Reply-To: <200410051454.i95EsRRt051566@repoman.freebsd.org> Message-ID: <20041005200205.C93568@xeon.unixathome.org> References: <200410051454.i95EsRRt051566@repoman.freebsd.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-vuxml@freebsd.org Subject: Re: cvs commit: ports/security/vuxml vuln.xml X-BeenThere: freebsd-vuxml@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Documenting security issues in VuXML List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Oct 2004 00:03:02 -0000 On Tue, 5 Oct 2004, Jacques Vidrine wrote: > nectar 2004-10-05 14:54:27 UTC > > FreeBSD ports repository > > Modified files: > security/vuxml vuln.xml > Log: > Note that older packages of bmon were dangerously installed set-user-ID. Are these commits automagically appearing in beta.freshports.org now? They should be. I don't have time to verify just now. -- Dan Langille - http://www.langille.org/ BSDCan - The Technical BSD Conference: http://www.bsdcan.org/ From owner-freebsd-vuxml@FreeBSD.ORG Fri Oct 8 16:54:26 2004 Return-Path: Delivered-To: freebsd-vuxml@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 075C216A4CF for ; Fri, 8 Oct 2004 16:54:26 +0000 (GMT) Received: from gw.celabo.org (gw.celabo.org [208.42.49.153]) by mx1.FreeBSD.org (Postfix) with ESMTP id C425043D46 for ; Fri, 8 Oct 2004 16:54:25 +0000 (GMT) (envelope-from nectar@celabo.org) Received: from localhost (localhost [127.0.0.1]) by gw.celabo.org (Postfix) with ESMTP id 5BD2F54846; Fri, 8 Oct 2004 11:54:25 -0500 (CDT) Received: from gw.celabo.org ([127.0.0.1]) by localhost (hellblazer.celabo.org [127.0.0.1]) (amavisd-new, port 10024) with SMTP id 33649-07; Fri, 8 Oct 2004 11:54:14 -0500 (CDT) Received: from madman.celabo.org (madman.celabo.org [10.0.1.111]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "madman.celabo.org", Issuer "celabo.org CA" (not verified)) by gw.celabo.org (Postfix) with ESMTP id BB3AF5482B; Fri, 8 Oct 2004 11:54:14 -0500 (CDT) Received: by madman.celabo.org (Postfix, from userid 1001) id 8C1416D466; Fri, 8 Oct 2004 11:54:01 -0500 (CDT) Date: Fri, 8 Oct 2004 11:54:01 -0500 From: "Jacques A. Vidrine" To: Dan Langille Message-ID: <20041008165401.GJ79893@madman.celabo.org> Mail-Followup-To: "Jacques A. Vidrine" , Dan Langille , freebsd-vuxml@freebsd.org References: <200410051454.i95EsRRt051566@repoman.freebsd.org> <20041005200205.C93568@xeon.unixathome.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20041005200205.C93568@xeon.unixathome.org> X-Url: http://www.celabo.org/ User-Agent: Mutt/1.5.6i cc: freebsd-vuxml@freebsd.org Subject: Re: cvs commit: ports/security/vuxml vuln.xml X-BeenThere: freebsd-vuxml@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Documenting security issues in VuXML List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Oct 2004 16:54:26 -0000 On Tue, Oct 05, 2004 at 08:02:51PM -0400, Dan Langille wrote: > On Tue, 5 Oct 2004, Jacques Vidrine wrote: > > > nectar 2004-10-05 14:54:27 UTC > > > > FreeBSD ports repository > > > > Modified files: > > security/vuxml vuln.xml > > Log: > > Note that older packages of bmon were dangerously installed set-user-ID. > > Are these commits automagically appearing in beta.freshports.org now? > They should be. I don't have time to verify just now. Hi Dan! It seems not ... http://www.freshports.org/net/bmon/ does not have any of the skull icons. Cheers, -- Jacques A Vidrine / NTT/Verio nectar@celabo.org / jvidrine@verio.net / nectar@FreeBSD.org From owner-freebsd-vuxml@FreeBSD.ORG Fri Oct 8 23:13:55 2004 Return-Path: Delivered-To: freebsd-vuxml@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4DE0016A4CE; Fri, 8 Oct 2004 23:13:55 +0000 (GMT) Received: from bast.unixathome.org (bast.unixathome.org [66.11.174.150]) by mx1.FreeBSD.org (Postfix) with ESMTP id 20F1843D49; Fri, 8 Oct 2004 23:13:55 +0000 (GMT) (envelope-from dan@langille.org) Received: from xeon (xeon.unixathome.org [192.168.0.18]) by bast.unixathome.org (Postfix) with ESMTP id A5FF13D37; Fri, 8 Oct 2004 19:13:54 -0400 (EDT) Date: Fri, 8 Oct 2004 19:13:54 -0400 (EDT) From: Dan Langille X-X-Sender: dan@xeon.unixathome.org To: "Jacques A. Vidrine" In-Reply-To: <20041008165401.GJ79893@madman.celabo.org> Message-ID: <20041008191322.P1418@xeon.unixathome.org> References: <200410051454.i95EsRRt051566@repoman.freebsd.org> <20041008165401.GJ79893@madman.celabo.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-vuxml@freebsd.org Subject: Re: cvs commit: ports/security/vuxml vuln.xml X-BeenThere: freebsd-vuxml@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Documenting security issues in VuXML List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Oct 2004 23:13:55 -0000 On Fri, 8 Oct 2004, Jacques A. Vidrine wrote: > On Tue, Oct 05, 2004 at 08:02:51PM -0400, Dan Langille wrote: > > On Tue, 5 Oct 2004, Jacques Vidrine wrote: > > > > > nectar 2004-10-05 14:54:27 UTC > > > > > > FreeBSD ports repository > > > > > > Modified files: > > > security/vuxml vuln.xml > > > Log: > > > Note that older packages of bmon were dangerously installed set-user-ID. > > > > Are these commits automagically appearing in beta.freshports.org now? > > They should be. I don't have time to verify just now. > > Hi Dan! > > It seems not ... http://www.freshports.org/net/bmon/ does not have any > of the skull icons. Good! But http://beta.freshports.org/net/bmon/ does! -- Dan Langille - http://www.langille.org/ BSDCan - The Technical BSD Conference: http://www.bsdcan.org/