ports/137332: add caution messages to some adobe products

Alexander Best alexbestms at math.uni-muenster.de
Tue Nov 3 00:00:17 UTC 2009


The following reply was made to PR ports/137332; it has been noted by GNATS.

From: Alexander Best <alexbestms at math.uni-muenster.de>
To: <bug-followup at FreeBSD.org>,
 <turutani at scphys.kyoto-u.ac.jp>
Cc:  
Subject: Re: ports/137332: add caution messages to some adobe products
Date: Tue, 03 Nov 2009 00:54:47 +0100 (CET)

 is there really a need for this? just because these ports/applications aren't
 maintained any more this doesn't necessarily require a warning to be issued
 during port build/installation.
 
 the latest security bulletin for acroread8 recommends using version 8.1.7
 which is the version in ports!
 
 the latest security bulletin for acroread9 recommends using version 9.2 which
 is the version in ports!
 
 the latest security bulletin for flash9 recommends using version 9.0.246.0
 which is the version in ports!
 
 i couldn't quite catch which version of flash10 is in the ports, but the
 latest security bulletin recommends using version 10.0.32.18!
 
 maybe you could report exactly which ports are suffering from security flaws.
 these ports should then be marked IGNORE.
 
 unless there aren't any security issues present in connection with these ports
 i vote for closing the PR.
 
 alex


More information about the freebsd-emulation mailing list