ports/57470: [SECURITY] port sysutils/cfengine2: remote root exploit

[Joe Marcus Clarke]

On Wed, 2003-10-01 at 18:51, Oliver Eikemeier wrote:
> Oliver Eikemeier wrote:
> 
> > => PR 56710 to fanf, PR 57470 to portmgr?
> 
> Ahem, the rational is that it is security related, so we should either
> fix it for 4.9 or mark it as forbidden, either way the 4.9-RELEASE tag
> has to be touched.

The port has been marked forbidden for now.  The 4.9 tag has been
slipped.

Joe

> 
>   http://www.freebsd.org/doc/en_US.ISO8859-1/books/porters-handbook/dads-broken.html:
> 
>   Ideally ports should be upgraded as soon as possible when a security vulnerability
>   is discovered so as to reduce the number of vulnerable FreeBSD hosts (we like being
>   known for being secure)
> 
> 
> 
> _______________________________________________
> freebsd-ports-bugs at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ports-bugs
> To unsubscribe, send any mail to "freebsd-ports-bugs-unsubscribe at freebsd.org"
-- 
PGP Key : http://www.marcuscom.com/pgp.asc
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
URL: <http://lists.freebsd.org/pipermail/freebsd-ports-bugs/attachments/20031002/ed39555d/attachment.sig>