From owner-svn-ports-all@freebsd.org Wed Dec 12 10:57:15 2018 Return-Path: Delivered-To: svn-ports-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7F49B1337EC5; Wed, 12 Dec 2018 10:57:15 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.117.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 11F4987773; Wed, 12 Dec 2018 10:57:15 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from leaf.local (unknown [IPv6:2001:8b0:151:1:5988:3842:f17f:57a8]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 3F45C7B2E; Wed, 12 Dec 2018 10:57:13 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk/3F45C7B2E; dkim=none; dkim-atps=neutral Subject: Re: svn commit: r487286 - head/security/vuxml To: Mathieu Arnold Cc: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org References: <201812120916.wBC9G4Y0075539@repo.freebsd.org> <20181212095700.wn4csjwred4gugme@atuin.in.mat.cc> <5db2345e-c8c0-1b2a-0d3f-40af99219cd4@FreeBSD.org> <20181212103051.xpzsfs3s3mvx2fj5@atuin.in.mat.cc> From: Matthew Seaman Message-ID: <3d70d3fe-0c5d-c6aa-c8af-68d3eb1adbc9@FreeBSD.org> Date: Wed, 12 Dec 2018 10:57:12 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <20181212103051.xpzsfs3s3mvx2fj5@atuin.in.mat.cc> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Language: en-GB Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 11F4987773 X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-4.92 / 15.00]; NEURAL_HAM_SHORT(-0.92)[-0.920,0]; REPLY(-4.00)[] X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2018 10:57:15 -0000 On 12/12/2018 10:30, Mathieu Arnold wrote: > On Wed, Dec 12, 2018 at 10:26:29AM +0000, Matthew Seaman wrote: >> On 12/12/2018 09:57, Mathieu Arnold wrote: >>> On Wed, Dec 12, 2018 at 09:16:04AM +0000, Matthew Seaman wrote: >>>> Author: matthew >>>> Date: Wed Dec 12 09:16:04 2018 >>>> New Revision: 487286 >>>> URL: https://svnweb.freebsd.org/changeset/ports/487286 >>>> >>>> Log: >>>> PHP 70 was EoL'd and is no longer in the ports. >>>> >>>> Reported by: joneum >>> >>> No longer in trunk, still in the quarterly, please put it back. >>> >> >> It's been put back now. > > As a side note, the descriptions in vuxml are not about what currently > exists, it is about what once existed, so technically, even in two > years, when recording a flavored php app, one should still mention all > the previous package names, so that people with old ports tree who have > not been updated in a while still get a notification that this app is > vulnerable to something. How far back should we take this? Is there any limit on how old a ports tree and the packages installed from it can be and still be expected to be supported by VuXML? Other than the practical limitation of 'pkg audit' or some equivalent being available? Cheers, Matthew