cvs commit: ports/x11/linux-XFree86-libs Makefile distinfo.i386
    Trevor Johnson 
    trevor at jpj.net
       
    Sat Mar  6 13:16:55 PST 2004
    
    
  
Dag-Erling [iso-8859-1] Smørgrav wrote:
> Trevor Johnson <trevor at FreeBSD.org> writes:
> >   Log:
> >   Update to version 4.3.0-2.90.55 due to several security bugs
> >   (discovered by iDefense and David Dawes) in the parsing of font
> >   files and the font.alias file which can give root privileges to
> >   local users.  [...]
>
> This is pointless as the bug in question only affects the server.
I hadn't noticed that--when I glanced at
<URL:ftp://ftp.xfree86.org/pub/XFree86/4.3.0/fixes/fontfile.diff>, which
addresses these bugs, it looked like the problem was in the X libraries,
not the server.
Anyway, keeping the old PORTVERSION would have been unwieldy:  I would
have had to use MASTER_SITE_LOCAL.
-- 
Trevor Johnson
    
    
More information about the cvs-all
mailing list