[kde-freebsd] portaudit say no to kdewebdev4

Kemian Dang fbsd.kdang at googlemail.com
Wed Jul 30 01:08:11 CEST 2008


Rene Ladan wrote:
> Kemian Dang schreef:
>> Hello List,
>>
>> In my freebsd7.0 stable and recent portaudit database, it complaint 
>> about the kdewebdev4, said :
>>
>> kdewebdev -- kommander untrusted code execution vulnerability.
>> Reference: 
>> <http://www.FreeBSD.org/ports/portaudit/91f1adc7-b3e9-11d9-a788-0001020eed82.html> 
>>
>>
>> Though I have used -DDISABLE_VULNERABILITIES to successfully 
>> installed kde4, I am not sure whether it is important?
> I guess not, see below.
>
>> Actually I have already has another problem on linux-flashplayer7.
>>
> How is linux-flashplayer7 related to kdewebdev4 ?
Just mention another port which is labeled as vulnerable.
As there is already one, it did not take me too much time to decide 
adding another one:)

Best wishes,
Kemian
>
>> Any idea?
>>
> Probably a too broad entry in the vulnerability database, see also my 
> mail
> "false CVE positive for kdewebdev?"
>
> Regards,
> Rene



More information about the kde-freebsd mailing list