From owner-freebsd-ports-bugs@FreeBSD.ORG Mon Sep 29 12:21:55 2008 Return-Path: Delivered-To: freebsd-ports-bugs@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2D70A1065686; Mon, 29 Sep 2008 12:21:55 +0000 (UTC) (envelope-from rea-fbsd@codelabs.ru) Received: from 0.mx.codelabs.ru (0.mx.codelabs.ru [144.206.177.45]) by mx1.freebsd.org (Postfix) with ESMTP id CB5008FC36; Mon, 29 Sep 2008 12:21:54 +0000 (UTC) (envelope-from rea-fbsd@codelabs.ru) DomainKey-Signature: a=rsa-sha1; q=dns; c=simple; s=one; d=codelabs.ru; h=Received:Date:From:To:Cc:Subject:Message-ID:References:MIME-Version:Content-Type:Content-Disposition:In-Reply-To:Sender; b=apGbds1aVr9uCtZK4IceqXkAZRVnJ02pfDH8DSAN6/xfYpo+hxl5Qn9thJRf59wQomIoe0g1omfaPfFfSKIdyw1K34l/uEp1l8izGXWuc+lTkyOY7Sr8oQgZl0vMANiZF3YXNkPLI5VBFjtXMkXs+rLE+DScRxxNafHxQUJB+2g=; Received: from void.codelabs.ru (void.codelabs.ru [144.206.177.25]) by 0.mx.codelabs.ru with esmtpsa (TLSv1:AES256-SHA:256) id 1KkHYQ-000Ewr-Bg; Mon, 29 Sep 2008 16:08:42 +0400 Date: Mon, 29 Sep 2008 16:08:40 +0400 From: Eygene Ryabinkin To: miwi@FreeBSD.org Message-ID: <4q1MIJYnkAI2/uhQIJO5iMTkJO8@jzvzJIf8fRWoTzX3FjwxUqmHGm0> References: <200809291146.m8TBk1WE048611@freefall.freebsd.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="MrRUTeZlqqNo1jQ9" Content-Disposition: inline In-Reply-To: <200809291146.m8TBk1WE048611@freefall.freebsd.org> Sender: rea-fbsd@codelabs.ru Cc: freebsd-ports-bugs@FreeBSD.org, simon@freebsd.org, secteam@freebsd.org, eik@freebsd.org Subject: Re: ports/127712: bad version specification for firefox3 in VuXML entry 2273879e-8a2f-11dd-a6fe-0030843d3802 X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Sep 2008 12:21:55 -0000 --MrRUTeZlqqNo1jQ9 Content-Type: text/plain; charset=koi8-r Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Martin, good day. Mon, Sep 29, 2008 at 11:46:01AM +0000, miwi@FreeBSD.org wrote: > State-Changed-Why:=20 > Committed. Thanks! I think that just changing 'firefox3' to 'firefox' is not enough: such specification will catch firefox 2.x too: ----- $ pkg_info -E 'firefox<3.0.2,1' firefox-2.0.0.17,1 $ sh portaudit -a Affected package: firefox-2.0.0.17,1 Type of problem: mozilla -- multiple vulnerabilities. Reference: 1 problem(s) in your installed packages found. You are advised to update or deinstall the affected package(s) immediately. ----- One should put a lower bound on firefox 3.x too: '>=3D3.0.0,1<3.0.2,1'. Or I am missing something? Thanks! --=20 Eygene _ ___ _.--. # \`.|\..----...-'` `-._.-'_.-'` # Remember that it is hard / ' ` , __.--' # to read the on-line manual =20 )/' _/ \ `-_, / # while single-stepping the kernel. `-'" `"\_ ,_.-;_.-\_ ', fsc/as # _.-'_./ {_.' ; / # -- FreeBSD Developers handbook=20 {_.-``-' {_/ # --MrRUTeZlqqNo1jQ9 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (FreeBSD) iEYEARECAAYFAkjgxUgACgkQthUKNsbL7YhFfwCfcPi/tS7UhxV1O9vjQ4cvND0t 3CQAn2oQjtDHYCosf6vESMmRVF/66qhN =U+b/ -----END PGP SIGNATURE----- --MrRUTeZlqqNo1jQ9--