From owner-freebsd-ports@FreeBSD.ORG Sat Mar 24 17:29:42 2012 Return-Path: Delivered-To: ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 19CE8106564A for ; Sat, 24 Mar 2012 17:29:42 +0000 (UTC) (envelope-from jhellenthal@dataix.net) Received: from mail-iy0-f182.google.com (mail-iy0-f182.google.com [209.85.210.182]) by mx1.freebsd.org (Postfix) with ESMTP id C27918FC0C for ; Sat, 24 Mar 2012 17:29:41 +0000 (UTC) Received: by iahk25 with SMTP id k25so8152502iah.13 for ; Sat, 24 Mar 2012 10:29:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dataix.net; s=rsa; h=date:from:to:cc:subject:message-id:mime-version:content-type :content-disposition; bh=qsVdhZt+dFef8sRgJbTLHJBffQRrIdN6ydXYbmHbllY=; b=YqCwDnyueFSH1fKgI9rXP77ZqsexCYFK+zhs27gkHLXG3JA0cBRqrPHYk+GXKh/gcO IdUEXh3OSKSbvMmx6Fme1wXjXjl3/kYfQzdvzAvxbywHVUCw8wSO2qtTttEOld6NgrGe QKZRHrBUfXNdNy8e4dSp7udzfevfRMzEt8OSA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=date:from:to:cc:subject:message-id:mime-version:content-type :content-disposition:x-gm-message-state; bh=qsVdhZt+dFef8sRgJbTLHJBffQRrIdN6ydXYbmHbllY=; b=hpq754tQll2na0dWQaeeQei/bjHFwHrOxL7/5f+RwUeOZS1Dsk7Oqr0BZGvsExke7o SONBCOPLMjzWPrXlfLaskjfjOhR0WoXiqZq8ndJkeWukM9MS6GjvKvKsxqi0MbCKDGmj Aa95pOTlrHUyFLA3RDeSuHBCUEyPSijy9UIsQ2DceEafWqN7lTyydBcbH3ShF8P/4pWv Il8PyKYj4wPnwS9/+NpT/WG+gCobe6bMf9ev+NxwVPLY3wHbWK1aO893Zl2sB0mUDfhi +t8F5fnmFdbLaBcTaky3fED/+Su2QQ5tyUszuhyH+UyP9q24/iWewJzPIB7AJQtAAXq5 FiLQ== Received: by 10.50.45.234 with SMTP id q10mr1896299igm.54.1332610181218; Sat, 24 Mar 2012 10:29:41 -0700 (PDT) Received: from DataIX.net ([99.181.142.190]) by mx.google.com with ESMTPS id en3sm8899910igc.2.2012.03.24.10.29.39 (version=TLSv1/SSLv3 cipher=OTHER); Sat, 24 Mar 2012 10:29:40 -0700 (PDT) Received: from DataIX.net (localhost [127.0.0.1]) by DataIX.net (8.14.5/8.14.5) with ESMTP id q2OHTcYX032031 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 24 Mar 2012 13:29:38 -0400 (EDT) (envelope-from jhellenthal@DataIX.net) Received: (from jhellenthal@localhost) by DataIX.net (8.14.5/8.14.5/Submit) id q2OHTb7G031927; Sat, 24 Mar 2012 13:29:37 -0400 (EDT) (envelope-from jhellenthal@DataIX.net) Date: Sat, 24 Mar 2012 13:29:37 -0400 From: Jason Hellenthal To: ports@freebsd.org Message-ID: <20120324172937.GA43822@DataIX.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="PEIAKu/WMn1b1Hv9" Content-Disposition: inline X-Gm-Message-State: ALoCoQnhnR+5OvRy+OGfKH8lj/NBmZDgA4cVz3ObIkF3yPNq9U6mLLO5odk1KqLTl3S+YwMw4BKD Cc: novel@freebsd.org Subject: security/gnutls update when... X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Mar 2012 17:29:42 -0000 --PEIAKu/WMn1b1Hv9 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Apparently this port has fell two versions behind. Is there anything that is going to happen to update it to the current stable version ? These advisories have been out for a week now. And the current version is 2.12.18. Database created: Sat Mar 24 13:15:03 EDT 2012 Affected package: gnutls-2.12.16 Type of problem: libtasn1 -- ASN.1 length decoding vulnerability. Reference: http://portaudit.FreeBSD.org/2e7e9072-73a0-11e1-a883-001cc0a36e12.html Affected package: gnutls-2.12.16 Type of problem: gnutls -- possible overflow/Denial of service vulnerabilities. Reference: http://portaudit.FreeBSD.org/aecee357-739e-11e1-a883-001cc0a36e12.html 2 problem(s) in your installed packages found. --=20 ;s =3D; --PEIAKu/WMn1b1Hv9 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iQEcBAEBAgAGBQJPbgSAAAoJEJBXh4mJ2FR+7+4H/3O03aHh7gWAveaWY8abrnKN aqnCYeFfOgZK7fUzPHspLstXQXHPqwKrxc20hmbuTpoKCGKFg4svEU6SjPjJcMMO uWOUSL12Br5Jm36mwS4OPtsBHktJBycz5DDHAEEDkQjSvxARLWyE0ISiO5KVkLL9 9qn4125vAz10ZSzeSG7jsNidgo00wAEVspo4Ms7r3hYYHxTsrxdQF3qaEetcgbVR +llmCVYOK8Kiyhytrh549ogOenGmb82NmXW6XvCU14RiE2RTgcnS/v6bm2UFy2JW 36LLLyYmJ1wkYwt/b+xwNlIMnZUtqT4BOmc/MAku7u//lgx61W7bn479Gq4mi/M= =pyiR -----END PGP SIGNATURE----- --PEIAKu/WMn1b1Hv9--