[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freebsd-commits-all
Subject:    Re: cvs commit: ports/security/vuxml vuln.xml
From:       Xin Li <delphij () delphij ! net>
Date:       2012-04-30 18:15:15
Message-ID: 4F9ED6B3.2020508 () delphij ! net
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 04/30/12 11:08, Chris Rees wrote:
> On 30 April 2012 17:51, Xin LI <delphij@freebsd.org> wrote:
>> delphij     2012-04-30 17:51:46 UTC
>> 
>> FreeBSD ports repository
>> 
>> Modified files: security/vuxml       vuln.xml Log: Document samba
>> incorrect permission checks vulnerability.
> 
> +	<range><gt>3.4.*</gt><lt>3.4.17</lt></range> +      </package> +
> <package> +	<name>samba35</name> +
> <range><gt>3.5.*</gt><lt>3.5.15</lt></range> +      </package> +
> <package> +	<name>samba36</name> +
> <range><gt>3.6.*</gt><lt>3.6.5</lt></range>
> 
> Don't you want to use <ge /> for the minimum versions in each
> range?

That's a good question, frankly I'm not sure...

I used gt here because * means -NaN to me (and there is no >= -NaN but
only > -NaN), plus, older entries do this, too.  It would probably a
good idea to use <ge>3.6.0<ge> instead, though.

Cheers,
- -- 
Xin LI <delphij@delphij.net>	https://www.delphij.net/
FreeBSD - The Power to Serve!		Live free or die
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)

iQEcBAEBCAAGBQJPntazAAoJEG80Jeu8UPuzgPUH/iUojCv1Vjovrv3VB6oY+kWO
uS7AQRibXZ8OxkmgAZ9R3Ruf7PvNMposQk6uv07XiJ1gMX2cmdsPWAL3CFWGsP6i
0eFti5ZglFrmxYEULjLxIyTlcPFnk5GSGxA1ruK1SVTp2KHvQojY+A3ciDCFgvnA
Ab4iR2F+kEh8mVeKjGrCx2amEITOkoi5hLLNxFiQs3bQ8qeZtb7ibFXcOOXvKml2
lfgwIQBjSXB76wugjJsECor+45h7/cWX9a5XvQSxmWpL2JsSQhZp61gyU0bHBJ+O
oXNhLVGcNh1+esLPrpln9t1G2TMAPxP7rMhTPBM51nj1+aYp1+pjN2vzsjrLFN8=
=82CH
-----END PGP SIGNATURE-----
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic