Arcoread7 secutiry vulnerability

[Boris Samorodov]

Hi!


cc'd to freebsd-security@ as somebody there may correct me,
cc'd to secteam@ as maintaner of security/portaudit.


On Sun, 28 Aug 2005 10:14:21 +0930 Ian Moore wrote:

> I've just updated my acroread port to 7.0.1 & was surprised when portaudit 
> still listed it as a vulnerability.

I think it is portaudit problem.

> According to  http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/85093, the 
> upgrade to 7.0.1 is suppoed to fix the problem, but according to 
> http://www.freebsd.org/ports/portaudit/02bc9b7c-e019-11d9-a8bd-000cf18bbe54.html 
> and Adobe's web site at http://www.adobe.com/support/techdocs/331710.html, 
> the problem exists in 7.0.1 as well, but is fixed in 7.0.2.

> I'm just wondering who is right here, or am I missing something?

It looks like you missed the platfom to pay attention to. For Linux
and Solaris "users should upgrade to Adobe Reader 7.0.1"...



WBR
-- 
bsam