In message <20060428181625.819F22DA27@cvs.netbsd.org>
	on Fri, 28 Apr 2006 18:16:25 +0000 (UTC),
	"Johnny C. Lam" <jlam@netbsd.org> wrote:
> 
> Module Name:	pkgsrc
> Committed By:	jlam
> Date:		Fri Apr 28 18:16:25 UTC 2006
> 
> Modified Files:
> 	pkgsrc/mail/sqwebmail: MESSAGE Makefile PLIST distinfo
> 	pkgsrc/mail/sqwebmail/files: sqwebmail.sh
> 	pkgsrc/mail/sqwebmail/patches: patch-ad patch-ah patch-aj
> Added Files:
> 	pkgsrc/mail/sqwebmail: INSTALL
> 
> Log Message:
> Update mail/sqwebmail to 5.1.0.  Changes from version 5.0.7 include:
Is sqwebmail still marked vulnerable?

% make fetch   
===> Checking for vulnerabilities in sqwebmail-5.1.1
*** WARNING - cross-site-scripting vulnerability in sqwebmail-5.1.1 - see http://secunia.com/advisories/15119/ for more information ***
or define ALLOW_VULNERABLE_PACKAGES if this package is absolutely essential
*** Error code 1

Stop.
make: stopped in /data/netbsd/pkgsrc/mail/sqwebmail
*** Error code 1

Stop.
make: stopped in /usr/pkgsrc/mail/sqwebmail
% ident /usr/pkgsrc/distfiles/pkg-vulnerabilities 
/usr/pkgsrc/distfiles/pkg-vulnerabilities:
     $NetBSD: pkg-vulnerabilities,v 1.1445 2006/04/26 15:32:50 salo Exp $


-- 
Takahiro Kambe <taca@back-street.net>