Failed upgrade of png

[David Wood]

Hi Frank and all,

In message <20080429214050.L1229 at Ace.nina.org>, Frank 
<frank_s at bellsouth.net> writes
>On Tue, 29 Apr 2008, Lowell Gilbert wrote:
>
>> Frank <frank_s at bellsouth.net> writes:
>>
>>> The advisory affects png < 1.2.7 so why do I get this?
>>
>> Because the problem is multimedia/avifile,
>> not graphics/png?
>
>Not according to the error message.
>
>===>  png-1.2.27 has known vulnerabilities:
>=> png -- unknown chunk processing uninitialized memory access.
>   Reference: 
><http://www.FreeBSD.org/ports/portaudit/57c705d6-12ae-11dd-bab7-0016179b
>2dd5.html>

Your vulnerability database hasn't been updated. vuxml was updated after 
the fix was committed to show that 1.2.27 has this issue resolved.

portaudit -F will do the necessary.


Best wishes,




David
-- 
David Wood
david at wood2.org.uk