From owner-cvs-all@FreeBSD.ORG Sat Aug 21 00:13:58 2010 Return-Path: Delivered-To: cvs-all@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 49C431065675; Sat, 21 Aug 2010 00:13:58 +0000 (UTC) (envelope-from stas@FreeBSD.org) Received: from mx0.deglitch.com (backbone.deglitch.com [78.110.53.255]) by mx1.freebsd.org (Postfix) with ESMTP id 76D768FC1A; Sat, 21 Aug 2010 00:13:56 +0000 (UTC) Received: from orion.SpringDaemons.com (207.47.0.2.static.nextweb.net [207.47.0.2]) by mx0.deglitch.com (Postfix) with ESMTPA id 15F898FC4E; Sat, 21 Aug 2010 04:13:21 +0400 (MSD) Received: from orion (localhost [127.0.0.1]) by orion.SpringDaemons.com (Postfix) with SMTP id B52C639E54; Fri, 20 Aug 2010 17:13:21 -0700 (PDT) Date: Fri, 20 Aug 2010 17:13:20 -0700 From: Stanislav Sedov To: Niels Heinen Message-Id: <20100820171320.026deb82.stas@FreeBSD.org> In-Reply-To: <201008192111.o7JLBrid090402@repoman.freebsd.org> References: <201008192111.o7JLBrid090402@repoman.freebsd.org> Organization: The FreeBSD Project X-Mailer: carrier-pigeon Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org, ports-committers@FreeBSD.org Subject: Re: cvs commit: ports/security/vuxml vuln.xml X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Aug 2010 00:13:58 -0000 On Thu, 19 Aug 2010 21:11:53 +0000 (UTC) Niels Heinen mentioned: > niels 2010-08-19 21:11:53 UTC > > FreeBSD ports repository > > Modified files: > security/vuxml vuln.xml > Log: > - Document SLiM insecure PATH assignment issue > - Removed space from vlc title > > Approved by: itetcu (implicit, mentor) > Security: http://seclists.org/oss-sec/2010/q3/198 > > | + > | + SLiM -- insecure PATH assignment By convention, the first word in the title was always the package name of an application. I'm not sure if it is documented somewhere, but it seems all other records follow that. -- Stanislav Sedov ST4096-RIPE