Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 18 Jan 2021 09:37:41 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 251995] security/vuxml request for version ranges for www/node entries
Message-ID:  <bug-251995-7788-6XWkFTNNDx@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-251995-7788@https.bugs.freebsd.org/bugzilla/>
References:  <bug-251995-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D251995

--- Comment #3 from Miroslav Lachman <000.fbsd@quip.cz> ---
(In reply to Bradley T. Hughes from comment #1)
It is not just about the node versions it is about the style of version ran=
ges
reported in vuln.xml in general. I think we need to always set both sides: =
the
minimum and maximum version. Not just "anything lower than". It caused prob=
lems
in the past and will cause problems in the future too.
Package of node was just an actual example.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-251995-7788-6XWkFTNNDx>