Date: Sun, 25 Mar 2012 19:26:34 +0400 From: Roman Bogorodskiy <bogorodskiy@gmail.com> To: Jason Hellenthal <jhellenthal@dataix.net> Cc: ports@freebsd.org, novel@freebsd.org Subject: Re: security/gnutls update when... Message-ID: <20120325152632.GC1293@kloomba> In-Reply-To: <20120324172937.GA43822@DataIX.net> References: <20120324172937.GA43822@DataIX.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--9UV9rz0O2dU/yYYn Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Jason Hellenthal wrote: >=20 > Apparently this port has fell two versions behind. Is there anything > that is going to happen to update it to the current stable version ? >=20 >=20 > These advisories have been out for a week now. And the current version > is 2.12.18. >=20 >=20 > Database created: Sat Mar 24 13:15:03 EDT 2012 > Affected package: gnutls-2.12.16 > Type of problem: libtasn1 -- ASN.1 length decoding vulnerability. > Reference: > http://portaudit.FreeBSD.org/2e7e9072-73a0-11e1-a883-001cc0a36e12.html >=20 > Affected package: gnutls-2.12.16 > Type of problem: gnutls -- possible overflow/Denial of service > vulnerabilities. > Reference: > http://portaudit.FreeBSD.org/aecee357-739e-11e1-a883-001cc0a36e12.html >=20 > 2 problem(s) in your installed packages found. The port was updated to 2.12.18 with some hacks to prevent shlib version bump. Please report if you have any problems with that. Roman Bogorodskiy --9UV9rz0O2dU/yYYn Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (FreeBSD) iQEcBAEBAgAGBQJPbzkoAAoJEMltX/4IwiJqzrUIAMD0SDuqhdQeT36S3fjotpvb Mmri9xsL/3LcBtJMRSGbjXSIbLYQYqwuuilstgw8VpFv3GLx1JPMNswjnJjk4/QA 8Zjs78Q2j2Jj3XezfAwdPtDdGNLteGpmCJ1DqdQF13YdFPQ0/l7WaB8sWg7ATvfr pjkdAFmpsDiDECGXuhhtuZIXqRY3pkqp3ZH9QULT7B0HFt+lxW0i5bMeRF95OSyW lAXbgBan1cdKfn0w7S6KlVrYt2zMXhzeNLyqlyN+H5BYuBV6xDoep0dgDX6e6ZJE 77TaZk/9A1dyCnxJKzQE4XIqTiVgc9JKkMe9Xq0r7cynnL1kt2bApp++IvICeYQ= =nYKS -----END PGP SIGNATURE----- --9UV9rz0O2dU/yYYn--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120325152632.GC1293>