From owner-svn-ports-all@FreeBSD.ORG Sun Jun 16 15:30:30 2013 Return-Path: Delivered-To: svn-ports-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 09849D72 for ; Sun, 16 Jun 2013 15:30:30 +0000 (UTC) (envelope-from lists@eitanadler.com) Received: from mail-pd0-f178.google.com (mail-pd0-f178.google.com [209.85.192.178]) by mx1.freebsd.org (Postfix) with ESMTP id D68CF1C8D for ; Sun, 16 Jun 2013 15:30:29 +0000 (UTC) Received: by mail-pd0-f178.google.com with SMTP id w11so2004545pde.37 for ; Sun, 16 Jun 2013 08:30:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=eitanadler.com; s=0xdeadbeef; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type; bh=W5nZMEN449jZIUCfjbQgZ9w7vj7JG1xrVpiJEFtoN1Y=; b=UjoFrm21ztVzpKBamECLcR8hqUT9fvBZal2q9FuRO2n0PHbLaVP1t+RvMb3GxzOzN/ cj4+dQvMuOebT5pOIc0hmOr4CXtwMv33hKPHKEz5UftzQMUU0xoObSqEk6obEiDkOzLD NnYrclYUqaPeD3jsmsqS1pu4nDaCmjk4iKiaU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type :x-gm-message-state; bh=W5nZMEN449jZIUCfjbQgZ9w7vj7JG1xrVpiJEFtoN1Y=; b=gPJW4/+PJG+RgCCCHQXKiUI1BoZgq9T/OGZdLbUhYP03Xw6tq2C7dE+Jahl6kqdLYm Akte8yHoE2Og7nx4n2q4V5Wp/EDwuZz/eiDvFNjz+SJv8jg0WuiapcPiFi3fCAtnKOlZ mQ/a0flK2bLbDerSgH/n/bBwondUwShuWxLFOXkNx2HWAL+MmI1ymFlpt/8LrZ4zjeRI Uo0KCQgMfzg3zPaOfWNO4i7S7cyskA16rhWhQ7L3iyJtvMBglWXMPQ1bA69cTXiM5ct6 0YMYCMK85MIItcGxCJMLdTcsyvv7JZSv+YgCX1A1svkXAan+uc+um3ecz2f8VMmgpLdq 2ipA== X-Received: by 10.68.244.164 with SMTP id xh4mr9581461pbc.157.1371396629318; Sun, 16 Jun 2013 08:30:29 -0700 (PDT) MIME-Version: 1.0 Sender: lists@eitanadler.com Received: by 10.70.45.33 with HTTP; Sun, 16 Jun 2013 08:29:59 -0700 (PDT) In-Reply-To: References: <201306161247.r5GCloLW020616@svn.freebsd.org> From: Eitan Adler Date: Sun, 16 Jun 2013 17:29:59 +0200 X-Google-Sender-Auth: AVDdHX8VUMs8_UHO91Fhts9NdXE Message-ID: Subject: Re: svn commit: r321045 - head/security/tor-devel To: bf1783@gmail.com Content-Type: text/plain; charset=UTF-8 X-Gm-Message-State: ALoCoQnNCpI1bFyc8Sfa/6ZXA/mcpsc5iDP8Zvn/tZN78O8qp4kSmtUJdNODo0zjFiuuqy/rMUDN Cc: svn-ports-head@freebsd.org, svn-ports-all@freebsd.org, ports-committers@freebsd.org X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 16 Jun 2013 15:30:30 -0000 On Sun, Jun 16, 2013 at 4:06 PM, b.f. wrote: > In this case no CVEs were issued This is odd. > and I rarely bother with VuXML > entries for the -devel port, because users have come to expect > frequent updates and bug disclosures, and a full list of the secure > versions would be complicated and subject to frequent changes. > However, I can add an entry marking all prior versions as vulnerable > in this case if users think that it would be helpful. I am fine with an entry that marks all previous entries as insecure - the minimum affected version is not important here. -- Eitan Adler Source, Ports, Doc committer Bugmeister, Ports Security teams