cvs commit: ports/www/linux-opera Makefile distinfo pkg-message ports/www/linux-opera/files patch-locale::en::search.ini patch-search.ini ports/www/opera Makefile distinfo ports/www/opera/files patch-locale::en::search.ini patch-search.ini

[Kent Stewart]

On Thursday 05 August 2004 02:17 pm, FUJISHIMA Satsuki wrote:
> At Thu, 05 Aug 2004 14:17:03 -0500,
>
> Jeremy Messenger wrote:
> > > This version is still linked statically with vulnerable libpng.
> >
> > Is there any proof of test that it's has the same vulnerable in
> > (linux-)opera?
>
> $ linux-opera http://scary.beasts.org/misc/pngtest_bad.png
>
> It looks like vulnerable too.

I think all that means is that you didn't
portupgrade -rf png

png-1.2.5_8 is supposed to produce an error but not crash what ever you 
are using.

Kent

-- 
Kent Stewart
Richland, WA

http://users.owt.com/kstewart/index.html