From owner-svn-ports-head@FreeBSD.ORG  Wed Feb 20 14:18:43 2013
Return-Path: <owner-svn-ports-head@FreeBSD.ORG>
Delivered-To: svn-ports-head@freebsd.org
Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115])
 by hub.freebsd.org (Postfix) with ESMTP id 0F2AB627;
 Wed, 20 Feb 2013 14:18:43 +0000 (UTC)
 (envelope-from cvs-src@yandex.ru)
Received: from forward5h.mail.yandex.net (forward5h.mail.yandex.net
 [IPv6:2a02:6b8:0:f05::5])
 by mx1.freebsd.org (Postfix) with ESMTP id 9337672F;
 Wed, 20 Feb 2013 14:18:42 +0000 (UTC)
Received: from smtp4h.mail.yandex.net (smtp4h.mail.yandex.net [84.201.186.21])
 by forward5h.mail.yandex.net (Yandex) with ESMTP id 6EEBED00FDD;
 Wed, 20 Feb 2013 18:18:30 +0400 (MSK)
Received: from smtp4h.mail.yandex.net (localhost [127.0.0.1])
 by smtp4h.mail.yandex.net (Yandex) with ESMTP id B81F12C0110;
 Wed, 20 Feb 2013 18:18:29 +0400 (MSK)
Received: from ip-86-110-189-214.spark-rostov.ru
 (ip-86-110-189-214.spark-rostov.ru [86.110.189.214])
 by smtp4h.mail.yandex.net (nwsmtp/Yandex) with ESMTP id IT24XKF0-IT2ern7W;
 Wed, 20 Feb 2013 18:18:29 +0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail;
 t=1361369909; bh=VPuYLdc1XL+SvntAzTAj1lScKouxi5MtF7nFy5XgbEw=;
 h=Message-ID:Date:From:User-Agent:MIME-Version:To:CC:Subject:
 References:In-Reply-To:Content-Type:Content-Transfer-Encoding;
 b=wLCnQXOxsWO+G8S1lhBonkAI74tmGGLBgkjM1OCEAD4gsCMS/5pCzpQq8TsR6GbVC
 LB7P+BkFPaKrgkOmHpjPziEgmMAXqLJFn94F4TjL8l+hTxqxMKGAoBvxkTDplvpMhm
 4GlWFSwsMjwSATncok9oJxvTegNARQavizRNp4Sg=
Message-ID: <5124DB0C.8030703@yandex.ru>
Date: Wed, 20 Feb 2013 18:17:48 +0400
From: Ruslan Makhmatkhanov <cvs-src@yandex.ru>
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64;
 rv:17.0) Gecko/20130211 Thunderbird/17.0.2
MIME-Version: 1.0
To: Eitan Adler <eadler@freebsd.org>
Subject: Re: svn commit: r312626 - head/security/vuxml
References: <201302201358.r1KDwKxc094476@svn.freebsd.org>
 <20130220140104.GA75978@FreeBSD.org>
 <CAF6rxg=AAEcuPzS_Hoeu+1KcpPeSxQxyW0czAM7BYiQgJ1KfTA@mail.gmail.com>
In-Reply-To: <CAF6rxg=AAEcuPzS_Hoeu+1KcpPeSxQxyW0czAM7BYiQgJ1KfTA@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: svn-ports-head@freebsd.org, Alexey Dokuchaev <danfe@freebsd.org>,
 svn-ports-all@freebsd.org, ports-committers@freebsd.org
X-BeenThere: svn-ports-head@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: SVN commit messages for the ports tree for head
 <svn-ports-head.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/svn-ports-head>,
 <mailto:svn-ports-head-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-ports-head>
List-Post: <mailto:svn-ports-head@freebsd.org>
List-Help: <mailto:svn-ports-head-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-ports-head>,
 <mailto:svn-ports-head-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Feb 2013 14:18:43 -0000

Eitan Adler wrote on 20.02.2013 18:03:
> On 20 February 2013 09:01, Alexey Dokuchaev <danfe@freebsd.org> wrote:
>> On Wed, Feb 20, 2013 at 01:58:20PM +0000, Ruslan Mahmatkhanov wrote:
>>> New Revision: 312626
>>> URL: http://svnweb.freebsd.org/changeset/ports/312626
>>>
>>> Log:
>>>    - add an entry for net/nss-pam-ldapd stack-based buffer overflow
>>>
>>>    According to advisory, vulnerability exists in nss-pam-ldapd < 0.8.11,
>>>    but since we never had this version in the ports tree, mark everything
>>>    < 0.8.12 as vulnerable.
>>
>> This seems weird.  Is there any limitation in VuXML that we need to cope
>> with by introducing such inconsistencies with official advisories?
>
> VuXML is intended to address FreeBSD user concerns, not upstream
> concerns.  There isn't a limitation here, but it  makes sense to write
> the VuXML <range> this way.

This is exactly what I guided when making decision: change it to 0.8.11 
or left it as 0.8.12 that was in original submission.

-- 
Regards,
Ruslan

Tinderboxing kills... the drives.