From nobody Thu Dec 7 13:17:01 2023 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4SmFDg4dMpz52yg4; Thu, 7 Dec 2023 13:17:23 +0000 (UTC) (envelope-from dan@langille.org) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4SmFDg2mXKz3Y1R; Thu, 7 Dec 2023 13:17:23 +0000 (UTC) (envelope-from dan@langille.org) Authentication-Results: mx1.freebsd.org; none Received: from compute7.internal (compute7.nyi.internal [10.202.2.48]) by mailout.nyi.internal (Postfix) with ESMTP id 186305C0035; Thu, 7 Dec 2023 08:17:22 -0500 (EST) Received: from imap42 ([10.202.2.92]) by compute7.internal (MEProxy); Thu, 07 Dec 2023 08:17:22 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=langille.org; h= cc:cc:content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:sender :subject:subject:to:to; s=fm1; t=1701955042; x=1702041442; bh=DP P+0H3M1CfI1/LHuo2Cf55k3gmd8nNMimiQ9XDiAh0=; b=N2XbuEBL0z/gj50YMa nI6dbmwCMw8gSScCqQ5Di6eC+g487ZZtHvBkMZXU9R4I/Qye1cpSBll57R4816/z WWRvaDjXrQxYBH5REruMU+/JGq0tUG/Amz97Ba+P7Bxakm188JGsGN1ohkSmdQZ2 uourHXWUIQPI0+fNXyXJcItJto7u5N/0l3UJxNiaRwnc9TZ8WLciaasY0b6dRg7j jpTZBHdFR3FBQxJ9l2IJcHC80uqqBQuvX84PTJ5PElSlP6n6OLAU1g9GjWPfbEhi tpLnRaqyAAJqhrt+wP/RRZ69I6HdHjWy20xRazSz7/6LOJRs/D5neSnmMsiNHh4z DuEQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:sender:subject :subject:to:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; t=1701955042; x=1702041442; bh=DPP+0H3M1CfI1 /LHuo2Cf55k3gmd8nNMimiQ9XDiAh0=; b=DoMuPrqetg0efBGEnKXbcGrSjuMJs rqTs4m9H3baPYnCD65mVQpHiW7VfKgMCpssVwTkkHiUXlNZmuQZVMIqpin2GqW1J 2id7fLXUV3Z694kkaGg5pZ0zjrnNPP7YaMYICPXUNq649t5BAMahV8AvpX9O0diK ng9JSIMgHvbMXeB2v692r83bXey1L8I4SgL9p9lRVyOcCJ1ZmUjTLs8DXfVDhh8r 5rWR6C+ByCsJ5VYOq/PKgyLwQ/aiLjDnP2J/72/M2p11qJ+jQPxm7ln4qvoeJr5L uzcL1t07Ay7o/LEZXjS5K5RKKAd4WH2k9tCqMxDzswJb/TItv1QdWTReA== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrudekvddgheduucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefofgggkfgjfhffhffvvefutgesth dtredtreertdenucfhrhhomhepfdffrghnucfnrghnghhilhhlvgdfuceouggrnheslhgr nhhgihhllhgvrdhorhhgqeenucggtffrrghtthgvrhhnpefhleevheeutdeiheffvdfhfe eiheegteejtdfgleehudegvdeigeelgeehheduhfenucffohhmrghinhepthifihhtthgv rhdrtghomhenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhroh hmpegurghnsehlrghnghhilhhlvgdrohhrgh X-ME-Proxy: Feedback-ID: ifbf9424e:Fastmail Received: by mailuser.nyi.internal (Postfix, from userid 501) id C7B2DBC007C; Thu, 7 Dec 2023 08:17:21 -0500 (EST) X-Mailer: MessagingEngine.com Webmail Interface User-Agent: Cyrus-JMAP/3.9.0-alpha0-1178-geeaf0069a7-fm-20231114.001-geeaf0069 List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-main@freebsd.org X-BeenThere: dev-commits-ports-main@freebsd.org MIME-Version: 1.0 Message-Id: In-Reply-To: <1A46BB39-EBBA-4E02-97A4-860DD9608000@freebsd.org> References: <202312052304.3B5N4IOf078862@gitrepo.freebsd.org> <4c967ca4-bfa1-4e30-b330-feb94d6c765b@app.fastmail.com> <38DAC2D1-58B0-43C5-9F1E-97281068AFD5@freebsd.org> <01372e6b-0e2d-4249-9f36-fdb24b380c71@app.fastmail.com> <1A46BB39-EBBA-4E02-97A4-860DD9608000@freebsd.org> Date: Thu, 07 Dec 2023 08:17:01 -0500 From: "Dan Langille" To: "Philip Paeps" Cc: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: Re: git: a580d36be4c7 - main - security/vuxml: add FreeBSD SA released on 2023-12-05 Content-Type: text/plain X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:19151, ipnet:66.111.4.0/24, country:US] X-Spamd-Bar: ---- X-Rspamd-Queue-Id: 4SmFDg2mXKz3Y1R On Wed, Dec 6, 2023, at 11:55 PM, Philip Paeps wrote: > On 2023-12-07 09:10:31 (+0800), Dan Langille wrote: >> On Wed, Dec 6, 2023, at 7:52 PM, Philip Paeps wrote: >>> On 2023-12-07 08:43:21 (+0800), Dan Langille wrote: >>>> Why don't we check them and record them separately? >>> >>> I already record them separately in vuxml. If a vulnerability only >>> affects userland, I record >>> FreeBSD[...]. >>> If the kernel is affected I record >>> FreeBSD-kernel[...]. >>> >>> Hmm ... is that the problem? Should I set the versions to the >>> *kernel* >>> patch level for FreeBSD-kernel vulnerabilities? >> >> First, let's test if that fixes it. >> >> This fixes it for me: >> >> 13.213.2_4 >> >> [...] >> >>> Is something going to get upset if I change the most recent entry to >>> 12.2_4? >> >> That I don't know. >> >> VUXML entries have AMENDED values don't they? > > Thanks for testing this out. I've pushed a vuxml entry in > 4826396e5d15. Thank you. All green on Ngaios: https://twitter.com/DLangille/status/1732750820431573086 Cheers -- Dan Langille dan@langille.org