From owner-freebsd-ports@freebsd.org Wed Dec 23 19:27:11 2015 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C6F25A506B0 for ; Wed, 23 Dec 2015 19:27:11 +0000 (UTC) (envelope-from mikej@mikej.com) Received: from mx2.paymentallianceintl.com (mx2.paymentallianceintl.com [216.26.158.171]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mx2.paymentallianceintl.com", Issuer "Go Daddy Secure Certification Authority" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 779551156 for ; Wed, 23 Dec 2015 19:27:10 +0000 (UTC) (envelope-from mikej@mikej.com) Received: from firewall.mikej.com (162-230-214-65.lightspeed.lsvlky.sbcglobal.net [162.230.214.65]) by mx2.paymentallianceintl.com (8.15.1/8.15.1) with ESMTPS id tBNJR8Vf030899 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for ; Wed, 23 Dec 2015 14:27:09 -0500 (EST) (envelope-from mikej@mikej.com) X-Authentication-Warning: mx2.paymentallianceintl.com: Host 162-230-214-65.lightspeed.lsvlky.sbcglobal.net [162.230.214.65] claimed to be firewall.mikej.com Received: from 192.168.6.63 (firewall.mikej.com [192.168.6.63]) by firewall.mikej.com (8.15.2/8.15.2) with ESMTP id tBNJQlCp007683 for ; Wed, 23 Dec 2015 14:26:48 -0500 (EST) (envelope-from mikej@mikej.com) DMARC-Filter: OpenDMARC Filter v1.3.1 firewall.mikej.com tBNJQlCp007683 Authentication-Results: mail.mikej.com; dmarc=none header.from=mikej.com DKIM-Filter: OpenDKIM Filter v2.10.3 firewall.mikej.com tBNJQlCp007683 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mikej.com; s=mail; t=1450898808; bh=qiUIXZv8/EReRuqnrQO79VTnNiVgUKUSOsL3xxiCn2g=; h=Date:From:To:Subject:In-Reply-To:References; b=J6JbF28mCYFQ63X7zqPyozj+aDT41Mr9e9myGg7gQDn9ncg1PXLf1Q9avoF7PfGLp ywnwsnUIx4v1nmqEyOW5s4UOXfbQkLISAeFAsvJfu0bD2PGbCDnbrqNJPzRPIzszBS LcFy16t1+Mu5rUUKVuVcIL2FIGwgfbE0ByMlj8yPMq5l8ZZR+rg1PfEo61Uhogp7bN laT4+0zGqu98rOABAoT/yCiXtKjPghqX2CXqmir4QUJpmu4HVgRh1WNahD+lWR0hVW jjElEl95Ax18DDv68QwZ+5Faj5jVZ/FCEtllQ5p4jU2mp1Q4AQ+H6ASvlbVoR4q0ZH 3pmastzWHmShA== X-Authentication-Warning: firewall.mikej.com: Host firewall.mikej.com [192.168.6.63] claimed to be 192.168.6.63 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Wed, 23 Dec 2015 14:26:47 -0500 From: Michael Jung To: freebsd-ports@freebsd.org Subject: Re: Reporting fixes so that vuxml can be updated In-Reply-To: <44zix1yuj1.fsf@lowell-desk.lan> References: <44zix1yuj1.fsf@lowell-desk.lan> Message-ID: <2633f9da097370a82c04c83d9cc3a11a@192.168.6.63> X-Sender: mikej@mikej.com User-Agent: Roundcube Webmail/1.1.3 X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Dec 2015 19:27:11 -0000 On 2015-12-23 11:55, Lowell Gilbert wrote: > Michael Jung writes: > >> "pkg audit" on my system returns the following CVE's for ffmpeg. I >> have noted >> in the list below that http://www.ffmpeg.org/security.html claims >> these CVE's >> were fixed in the ffmpeg version noted. >> >> Is this the correct place/list to report updates to that vuxml can be >> updated? > > No updates to vuxml are needed (or appropriate). > > Update your ffmpeg port and you'll be fine. > _______________________________________________ > freebsd-ports@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-ports > To unsubscribe, send any mail to > "freebsd-ports-unsubscribe@freebsd.org" I neglected to state that my port is current ffmpeg-2.8.3_2,1 Realtime audio/video encoder/converter and streaming server Yet all the CVE's reported by "pkg audit" have been fixed according to the ffmpeg security link provided in my previous email and my notes as to what version of ffmpeg they were corrected in. This would seem to me that vuxml is not current as of the current maintainers package version. PORTNAME= ffmpeg PORTVERSION= 2.8.3 PORTREVISION= 2 PORTEPOCH= 1 Please let me know what I am missing here. Regards, --mikej