FreeBSD Port: libspf2-1.0.4_1

Wesley Shields wxs at FreeBSD.org
Thu Apr 23 14:17:49 UTC 2009


On Thu, Apr 23, 2009 at 09:12:12AM -0400, Wesley Shields wrote:
> On Thu, Apr 23, 2009 at 11:44:31AM +0200, Pavel Hlub?k wrote:
> > Hi ,
> > 
> > sorry for disturbing you. 
> > 
> > The port is still broken so I can't install the `postfix-policyd-spf`
> > because it depends on the libspf2-10. 
> > 
> > ===>  libspf2-1.0.4_1 has known vulnerabilities:
> > => libspf2 -- Buffer overflow.
> >    Reference:
> > <http://www.FreeBSD.org/ports/portaudit/2ddbfd29-a455-11dd-a55e-00163e000016
> > .html>
> > 
> > I want to use a ports system because it is easier using a `portupgade` to
> > upgrade the application in the future.
> > Can you write me when the problem can be solved. Thank you very much.
> > 
> > I run FreeBSD 7.1-RELEASE-p4.
> 
> It looks like the master site is no longer valid.  A quick google search
> didn't show up any other updated locations.  Can you move to libspf2?

My apologies, I was looking at mail/libspf and not mail/libspf2-10.  I'm
not sure if mail/postfix-policyd-spf will work with mail/libspf2.  I'd
try changing the lib dependency to be looking for spf2.3 instead and see
if it works.

> I think this port should be retired as it appears abandoned upstream.

This part still holds true as it appears mail/libspf has been abandoned
upstream.

-- WXS


More information about the freebsd-ports mailing list