Can't update xorg-libraries to 6.7.0_2

[KIMURA Yasuhiro]

  According to the commit message of xorg-libraries-6.7.0_2, the
vulnerabilities of CAN-2004-0687 and CAN-2004-0688 seem to be
fixed. But update to the version failed because portaudit says it
still has the same ones.

eastasia# uname -mr ; portaudit -Fd ; portupgrade xorg-libraries
4.10-RELEASE-p2 i386
New database installed.
Database created: Fri Sep 17 03:10:27 JST 2004
--->  Upgrading 'xorg-libraries-6.7.0_1' to 'xorg-libraries-6.7.0_2' (x11/xorg-libraries)
--->  Building '/usr/ports/x11/xorg-libraries'
===>  Cleaning for libiconv-1.9.2_1
===>  Cleaning for gettext-0.13.1_1
===>  Cleaning for gmake-3.80_2
===>  Cleaning for imake-6.7.0_2
===>  Cleaning for libtool-1.3.5_2
===>  Cleaning for libtool-1.5.8
===>  Cleaning for pkgconfig-0.15.0_1
===>  Cleaning for freetype2-2.1.7_3
===>  Cleaning for expat-1.95.8
===>  Cleaning for fontconfig-2.2.3,1
===>  Cleaning for xorg-libraries-6.7.0_2
===>  xorg-libraries-6.7.0_2 has known vulnerabilities:
>> xpm --- image decoding vulnerabilities.
   Reference: <http://www.FreeBSD.org/ports/portaudit/ef253f8b-0727-11d9-b45d-000c41e2cdad.html>
>> Please update your ports tree and try again.
*** Error code 1

Stop in /usr1/cvsup/ports/x11/xorg-libraries.
** Command failed [exit code 1]: /usr/bin/script -qa /tmp/portupgrade49726.0 make
** Fix the problem and try again.
** Listing the failed packages (*:skipped / !:failed)
        ! x11/xorg-libraries (xorg-libraries-6.7.0_1)   (unknown build error)
--->  Packages processed: 0 done, 0 ignored, 0 skipped and 1 failed
eastasia# 

Then which is right?

---
KIMURA Yasuhiro
Mail: yasu at utahime.org
WWW:  http://www.utahime.org/