Rene Ladan wrote:
2008/6/18 Jeremy Messenger <[EMAIL PROTECTED]>:
Hello folks,

[...]
x11/pixman: Update to 0.10.0
[...]
graphics/cairo: Update to 1.6.4
[...]
graphics/poppler: Update to 0.8.3
[...]
www/firefox3: Update to 3.0 final

[...]

I saw this in the daily security check:

Affected package: firefox-3.0_1,1
Type of problem: mozilla -- multiple vulnerabilities.
Reference: 
<http://www.FreeBSD.org/ports/portaudit/e190ca65-3636-11dc-a697-000c6ec775d9.html>

Is this a false positive?  It seems to affect firefox >3.*,1 but the
CVE entries say it is fixed in firefox 2.0.0.5

Rene

I got past that by adding DISABLE_VULNERABILITIES=yes to my build line. I'm sure it probably is a false positive, though. But at least it wasn't something that broke the build entirely.

Naram Qashat
_______________________________________________
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to