svn commit: r356398 - head/security/vuxml

Ryan Steinmetz zi at FreeBSD.org
Wed Jun 4 14:34:16 UTC 2014


On (06/04/14 08:50), Bryan Drewery wrote:
>
>> On Jun 4, 2014, at 3:32, Tijl Coosemans <tijl at FreeBSD.org> wrote:
>>
>>> On Tue, 3 Jun 2014 19:42:40 +0000 (UTC) Ryan Steinmetz wrote:
>>> Author: zi
>>> Date: Tue Jun  3 19:42:40 2014
>>> New Revision: 356398
>>> URL: http://svnweb.freebsd.org/changeset/ports/356398
>>> QAT: https://qat.redports.org/buildarchive/r356398/
>>>
>>> Log:
>>>  - Document vulnerability in security/gnutls3 (CVE-2014-3466)
>>
>> Is security/gnutls affected by this as well?  Because most ports are
>> still using that version.
>
>Not sure. That port needs to just die though and all ports use the new.

GnuTLS' website doesn't mention 2.x, however, I did see someones post
that mentioned that the bad code may have been introduced in 1.x.

Given that 2.x seems deprecated/unsupported by the authors, I think we
really need to push to ditch it.

-r

-- 
Ryan Steinmetz
PGP: 9079 51A3 34EF 0CD4 F228  EDC6 1EF8 BA6B D028 46D7


More information about the svn-ports-head mailing list