Date: Thu, 07 Dec 2023 08:17:01 -0500 From: "Dan Langille" <dan@langille.org> To: "Philip Paeps" <philip@freebsd.org> Cc: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: Re: git: a580d36be4c7 - main - security/vuxml: add FreeBSD SA released on 2023-12-05 Message-ID: <d7055bb8-8389-4a99-a282-21bc60ec7ae1@app.fastmail.com> In-Reply-To: <1A46BB39-EBBA-4E02-97A4-860DD9608000@freebsd.org> References: <202312052304.3B5N4IOf078862@gitrepo.freebsd.org> <4c967ca4-bfa1-4e30-b330-feb94d6c765b@app.fastmail.com> <38DAC2D1-58B0-43C5-9F1E-97281068AFD5@freebsd.org> <d532ec63-66fc-410d-b397-7170a34a5f30@app.fastmail.com> <BD01492D-CF73-4A7F-8FCF-6236D25BDA1E@freebsd.org> <01372e6b-0e2d-4249-9f36-fdb24b380c71@app.fastmail.com> <1A46BB39-EBBA-4E02-97A4-860DD9608000@freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Dec 6, 2023, at 11:55 PM, Philip Paeps wrote: > On 2023-12-07 09:10:31 (+0800), Dan Langille wrote: >> On Wed, Dec 6, 2023, at 7:52 PM, Philip Paeps wrote: >>> On 2023-12-07 08:43:21 (+0800), Dan Langille wrote: >>>> Why don't we check them and record them separately? >>> >>> I already record them separately in vuxml. If a vulnerability only >>> affects userland, I record >>> <package><name>FreeBSD</name>[...]</package>. >>> If the kernel is affected I record >>> <package><name>FreeBSD-kernel</name>[...]</package>. >>> >>> Hmm ... is that the problem? Should I set the versions to the >>> *kernel* >>> patch level for FreeBSD-kernel vulnerabilities? >> >> First, let's test if that fixes it. >> >> This fixes it for me: >> >> <range><ge>13.2</ge><lt>13.2_4</lt></range> >> >> [...] >> >>> Is something going to get upset if I change the most recent entry to >>> <lt>12.2_4</lt>? >> >> That I don't know. >> >> VUXML entries have AMENDED values don't they? > > Thanks for testing this out. I've pushed a <modified/> vuxml entry in > 4826396e5d15. Thank you. All green on Ngaios: https://twitter.com/DLangille/status/1732750820431573086 Cheers -- Dan Langille dan@langille.org
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?d7055bb8-8389-4a99-a282-21bc60ec7ae1>