Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 11 Jun 2021 19:26:46 +0200
From:      Thierry Thomas <thierry@freebsd.org>
To:        Dan Langille <dan@langille.org>
Cc:        "ports-committers@freebsd.org" <ports-committers@freebsd.org>, "dev-commits-ports-all@freebsd.org" <dev-commits-ports-all@freebsd.org>, "dev-commits-ports-main@freebsd.org" <dev-commits-ports-main@freebsd.org>
Subject:   Re: git: 0605ef1bd0c2 - main - graphics/ImageMagick6: upgrade to 6.9.12-12
Message-ID:  <YMOc1t1YtAMJH22Z@graf.pompo.net>
In-Reply-To: <EBE0EB79-89DD-4A0D-8DFC-31408F97FD4D@langille.org>
References:  <202105272056.14RKuNKf097784@gitrepo.freebsd.org> <EBE0EB79-89DD-4A0D-8DFC-31408F97FD4D@langille.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--T0JI6v8mJh8/lULE
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Le ven. 11 juin 21 =C3=A0 18:48:18 +0200, Dan Langille <dan@langille.org>
 =C3=A9crivait=C2=A0:

> >    Note: this might fix some vulnerabilities, e.g. CVE-2021-20244,
> >    CVE-2021-20243, CVE-2021-20176 or CVE-2020-27829, but this is not cl=
ear
> >    for me.
> >=20
> >    PR:             255818
> >    Approved by:    maintainer=E2=80=99s time-out
>=20
> This was a vuln fix and not backported to 2021Q2?
>=20
> Is there any reason I should not do that backport now?

Yes, please! I sent a mail to ports-secteam@ and to the maintainer, but
did not get any answer, and then I forgot about it=E2=80=A6
--=20
Th. Thomas.

--T0JI6v8mJh8/lULE
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=FpDc
-----END PGP SIGNATURE-----

--T0JI6v8mJh8/lULE--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?YMOc1t1YtAMJH22Z>