From owner-svn-ports-all@freebsd.org Wed Aug 14 12:17:33 2019 Return-Path: Delivered-To: svn-ports-all@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 23338A987C; Wed, 14 Aug 2019 12:17:33 +0000 (UTC) (envelope-from tobik@freebsd.org) Received: from wout4-smtp.messagingengine.com (wout4-smtp.messagingengine.com [64.147.123.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 467pW03pNCz4DkW; Wed, 14 Aug 2019 12:17:32 +0000 (UTC) (envelope-from tobik@freebsd.org) Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.west.internal (Postfix) with ESMTP id 4B093458; Wed, 14 Aug 2019 08:17:30 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute7.internal (MEProxy); Wed, 14 Aug 2019 08:17:30 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=PupbeC WGt1jzUG0s1EeAL41wBAIABfjHIuzQlHdv3ws=; b=kOZbeBLG5VSvyLrtZjh84i LKCGdMeCuB77cG5G9i8B0pMsX+r6gYGClkyHkuN4AraC76yuBwdWpBtJFemCzJlr roPaR3A+QRjCqrE9lAbgbFRxKB4Epp3sp6KuXqAqRk6eS0jrUlg1AoFNdtDCbiCs CNRedjZ8wMMccztkIwdXWwpOqqRzGRBsQ3hFYDk8n7KSG8rD6CEvT/83Dq2+FAlE ohId62TaQfLp7T877Ck0iEI1Gnq/I7jt+WCNgO/uqL9w/LYlJCPsA1PAGgxnqx9F L+T+7dH41N1tQzbG4BzAMYfRLitxDAHTpKnVp1Y7lQL1/3w6R4KDbsV62WRM+fag == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddruddvkedggeeiucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepfffhvffukfhfgggtuggjfgesghdtreertdervdenucfhrhhomhepvfhosghi rghsucfmohhrthhkrghmphcuoehtohgsihhksehfrhgvvggsshgurdhorhhgqeenucffoh hmrghinhepfhhrvggvsghsugdrohhrghdpvhhugihmlhdrohhrghenucfkphepleehrdel tddrvddviedrjeenucfrrghrrghmpehmrghilhhfrhhomhepthhosghikhesfhhrvggvsg hsugdrohhrghenucevlhhushhtvghrufhiiigvpedt X-ME-Proxy: Received: from urd.tobik.me (ip5f5ae207.dynamic.kabel-deutschland.de [95.90.226.7]) by mail.messagingengine.com (Postfix) with ESMTPA id 7FB42380079; Wed, 14 Aug 2019 08:17:28 -0400 (EDT) Date: Wed, 14 Aug 2019 14:17:26 +0200 From: Tobias Kortkamp To: Jochen Neumeister Cc: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: Re: svn commit: r508895 - head/security/vuxml Message-ID: <20190814121726.GA50509@urd.tobik.me> References: <201908140722.x7E7MdSW088299@repo.freebsd.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="cNdxnHkX5QqsyA0e" Content-Disposition: inline In-Reply-To: <201908140722.x7E7MdSW088299@repo.freebsd.org> User-Agent: Mutt/1.12.1 (2019-06-15) X-Rspamd-Queue-Id: 467pW03pNCz4DkW X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; none X-Spamd-Result: default: False [-6.95 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; NEURAL_HAM_SHORT(-0.95)[-0.951,0]; REPLY(-4.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0] X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Aug 2019 12:17:33 -0000 --cNdxnHkX5QqsyA0e Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Aug 14, 2019 at 07:22:39AM +0000, Jochen Neumeister wrote: > Author: joneum > Date: Wed Aug 14 07:22:39 2019 > New Revision: 508895 > URL: https://svnweb.freebsd.org/changeset/ports/508895 >=20 > Log: > Add entry for www/nginx and www/nginx-devel > =20 > Sponsored by: Netzkommune GmbH >=20 > Modified: > head/security/vuxml/vuln.xml >=20 > Modified: head/security/vuxml/vuln.xml > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D > --- head/security/vuxml/vuln.xml Wed Aug 14 07:08:19 2019 (r508894) > +++ head/security/vuxml/vuln.xml Wed Aug 14 07:22:39 2019 (r508895) > @@ -58,6 +58,43 @@ Notes: > * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) > --> > > + > + NGINX -- Multiple vulnerabilities > + > + > + nginx > + 1.16.1 > + This entry is not correct: $ pkg info -E nginx nginx-1.16.0_1,2 $ pkg audit -f security/vuxml/vuln.xml nginx-1.16.0_1,2 0 problem(s) in 0 installed package(s) found. www/nginx has PORTEPOCH=3D2 so the entry should have 1.16.1,2 or users will never be informed of this via pkg audit. --cNdxnHkX5QqsyA0e Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQGTBAEBCgB9FiEElXvTEJc6ePgdQuobpPCftzzFH2EFAl1T+9BfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDk1 N0JEMzEwOTczQTc4RjgxRDQyRUExQkE0RjA5RkI3M0NDNTFGNjEACgkQpPCftzzF H2Eh+Qf+LWfFImWmR8THjCBEtFWMMxMXnpAX1QJOu8Xb4vgJLGeEsfs6/OTnu/Dw 1WE3GJAvJBK/2AGb4o9STLsQF48e5LmIOh4O0qepYXS2gBOAnA/k1X4zBBQ2DYRU s0y+QQXU9yahh+CQ/WKRc1RA8qRKL/hB9lWVN+3Mf69gi20212FTp31deBV9s1tq NnyVKLEqXC5SAdDmG6ZK79I20OfOovpbD3+zmuRNxeHkQbo0ctHcDpTlyH8iiuk+ FUNbozCuOr1wBxovoGSYxkakir2fICx9642MRhqIkNIjD8SOecC7AGf3T62jxnPH xwde0xDJ1VzbIAHcRmvrlCRj0zuR6g== =Xs6V -----END PGP SIGNATURE----- --cNdxnHkX5QqsyA0e--