FreeBSD Port: libspf2-1.0.4_1
Wesley Shields
wxs at FreeBSD.org
Thu Apr 23 14:17:49 UTC 2009
On Thu, Apr 23, 2009 at 09:12:12AM -0400, Wesley Shields wrote:
> On Thu, Apr 23, 2009 at 11:44:31AM +0200, Pavel Hlub?k wrote:
> > Hi ,
> >
> > sorry for disturbing you.
> >
> > The port is still broken so I can't install the `postfix-policyd-spf`
> > because it depends on the libspf2-10.
> >
> > ===> libspf2-1.0.4_1 has known vulnerabilities:
> > => libspf2 -- Buffer overflow.
> > Reference:
> > <http://www.FreeBSD.org/ports/portaudit/2ddbfd29-a455-11dd-a55e-00163e000016
> > .html>
> >
> > I want to use a ports system because it is easier using a `portupgade` to
> > upgrade the application in the future.
> > Can you write me when the problem can be solved. Thank you very much.
> >
> > I run FreeBSD 7.1-RELEASE-p4.
>
> It looks like the master site is no longer valid. A quick google search
> didn't show up any other updated locations. Can you move to libspf2?
My apologies, I was looking at mail/libspf and not mail/libspf2-10. I'm
not sure if mail/postfix-policyd-spf will work with mail/libspf2. I'd
try changing the lib dependency to be looking for spf2.3 instead and see
if it works.
> I think this port should be retired as it appears abandoned upstream.
This part still holds true as it appears mail/libspf has been abandoned
upstream.
-- WXS
More information about the freebsd-ports
mailing list