ports/129097: [vuxml] print/hplip: document CVE-2008-2940 and CVE-2008-2941

[Eygene Ryabinkin]

Martin Wilke asked me if I am planning to update the port.  My original
intention was to wait for a 2.8.10 (I am aware of ports/128914, but, to
my regret, it contains no patch now), but as the quick fix I had ported
RedHat's patches to the current port version.

Please note that the handling of alerts had been changed: now all alert
configuration is stored in /etc/hp/alers.conf and isn't
user-controllable anymore.

And I had to mention that whilst I had tested the port for building
and daemon for starting properly, I have no real hardware to test the
thing.  So maintainer's testing is needed.
-- 
Eygene
 _                ___       _.--.   #
 \`.|\..----...-'`   `-._.-'_.-'`   #  Remember that it is hard
 /  ' `         ,       __.--'      #  to read the on-line manual   
 )/' _/     \   `-_,   /            #  while single-stepping the kernel.
 `-'" `"\_  ,_.-;_.-\_ ',  fsc/as   #
     _.-'_./   {_.'   ; /           #    -- FreeBSD Developers handbook 
    {_.-``-'         {_/            #
-------------- next part --------------
A non-text attachment was scrubbed...
Name: apply-fixes-for-CVE-2008-2940-and-CVE-2941.diff
Type: text/x-diff
Size: 13600 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-ports-bugs/attachments/20081123/0d415f47/attachment.diff>