From owner-cvs-ports@FreeBSD.ORG Tue Apr 12 08:24:49 2005 Return-Path: Delivered-To: cvs-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1764816A4CE; Tue, 12 Apr 2005 08:24:49 +0000 (GMT) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id F22CC43D46; Tue, 12 Apr 2005 08:24:48 +0000 (GMT) (envelope-from simon@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id j3C8Om79006594; Tue, 12 Apr 2005 08:24:48 GMT (envelope-from simon@repoman.freebsd.org) Received: (from simon@localhost) by repoman.freebsd.org (8.13.1/8.13.1/Submit) id j3C8OmhX006593; Tue, 12 Apr 2005 08:24:48 GMT (envelope-from simon) Message-Id: <200504120824.j3C8OmhX006593@repoman.freebsd.org> From: "Simon L. Nielsen" Date: Tue, 12 Apr 2005 08:24:48 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: ports/security/vuxml vuln.xmlports/sysutils/portupgrade Makefile ports/sysutils/portupgrade/files patch-CAN-2005-0610 X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Apr 2005 08:24:49 -0000 simon 2005-04-12 08:24:48 UTC FreeBSD ports repository Modified files: security/vuxml vuln.xml sysutils/portupgrade Makefile Added files: sysutils/portupgrade/files patch-CAN-2005-0610 Log: Fix and document insecure temporary file handling in portupgrade. Security: CAN-2005-0610 Security: http://vuxml.FreeBSD.org/22f00553-a09d-11d9-a788-0001020eed82.html Approved by: erwin (mentor), maintainer timeout OK'ed by: portmgr Reviewed by: nectar Revision Changes Path 1.629 +52 -1 ports/security/vuxml/vuln.xml 1.195 +1 -1 ports/sysutils/portupgrade/Makefile 1.1 +68 -0 ports/sysutils/portupgrade/files/patch-CAN-2005-0610 (new)