From owner-cvs-all  Tue May  2  9: 9:36 2000
Delivered-To: cvs-all@freebsd.org
Received: from flood.ping.uio.no (flood.ping.uio.no [129.240.78.31])
	by hub.freebsd.org (Postfix) with ESMTP
	id AEC6337BEC4; Tue,  2 May 2000 09:06:59 -0700 (PDT)
	(envelope-from des@flood.ping.uio.no)
Received: (from des@localhost)
	by flood.ping.uio.no (8.9.3/8.9.3) id SAA86676;
	Tue, 2 May 2000 18:06:57 +0200 (CEST)
	(envelope-from des@flood.ping.uio.no)
To: Kris Kennaway <kris@FreeBSD.org>
Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: Re: cvs commit: ports/x11/XFree86-4 Makefile
References: <200004300821.BAA14444@freefall.freebsd.org>
From: Dag-Erling Smorgrav <des@flood.ping.uio.no>
Date: 02 May 2000 18:06:56 +0200
In-Reply-To: Kris Kennaway's message of "Sun, 30 Apr 2000 01:21:57 -0700 (PDT)"
Message-ID: <xzpu2ghhr6n.fsf@flood.ping.uio.no>
Lines: 12
User-Agent: Gnus/5.0802 (Gnus v5.8.2) Emacs/20.4
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Kris Kennaway <kris@FreeBSD.org> writes:
>   Log:
>   Mark FORBIDDEN due to the root hole in the X server reported on Bugtraq.
>   I've tried *multiple* times to talk to an XFree86 developer about the
>   problem, but they haven't deigned to respond to me.

I must have missed something - AFAIK, 4.0 was reported as not
vulnerable, whereas 3.3.6 was vulnerable.

DES
-- 
Dag-Erling Smorgrav - des@flood.ping.uio.no


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message