From owner-svn-ports-all@FreeBSD.ORG  Wed Apr 30 18:20:34 2014
Return-Path: <owner-svn-ports-all@FreeBSD.ORG>
Delivered-To: svn-ports-all@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 58570FAE
 for <svn-ports-all@freebsd.org>; Wed, 30 Apr 2014 18:20:34 +0000 (UTC)
Received: from freefall.freebsd.org (freefall.freebsd.org
 [IPv6:2001:1900:2254:206c::16:87])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 3EBCE130B
 for <svn-ports-all@freebsd.org>; Wed, 30 Apr 2014 18:20:34 +0000 (UTC)
Received: from freefall.freebsd.org (localhost [127.0.0.1])
 by freefall.freebsd.org (8.14.8/8.14.8) with ESMTP id s3UIKYoS001345
 for <svn-ports-all@freebsd.org>; Wed, 30 Apr 2014 18:20:34 GMT
 (envelope-from bdrewery@freefall.freebsd.org)
Received: (from bdrewery@localhost)
 by freefall.freebsd.org (8.14.8/8.14.8/Submit) id s3UIKXPq001344
 for svn-ports-all@freebsd.org; Wed, 30 Apr 2014 18:20:33 GMT
 (envelope-from bdrewery)
Received: (qmail 43583 invoked from network); 30 Apr 2014 13:20:28 -0500
Received: from unknown (HELO roundcube.xk42.net) (10.10.5.5)
 by sweb.xzibition.com with SMTP; 30 Apr 2014 13:20:28 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
 format=flowed
Content-Transfer-Encoding: 7bit
Date: Wed, 30 Apr 2014 13:20:28 -0500
From: Bryan Drewery <bdrewery@FreeBSD.org>
To: ports-committers@freebsd.org, svn-ports-all@freebsd.org,
 svn-ports-head@freebsd.org
Subject: Re: svn commit: r352694 - head/security/vuxml
Organization: FreeBSD
In-Reply-To: <201404301751.s3UHpUWc057181@svn.freebsd.org>
References: <201404301751.s3UHpUWc057181@svn.freebsd.org>
Message-ID: <60e45e3e33d7dc103d7395e745146d5a@shatow.net>
X-Sender: bdrewery@FreeBSD.org
User-Agent: Roundcube Webmail/0.9.5
X-BeenThere: svn-ports-all@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: SVN commit messages for the ports tree <svn-ports-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/svn-ports-all>,
 <mailto:svn-ports-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-ports-all/>
List-Post: <mailto:svn-ports-all@freebsd.org>
List-Help: <mailto:svn-ports-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-ports-all>,
 <mailto:svn-ports-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Apr 2014 18:20:34 -0000

All take note to please use *1* <name> per <package> for now.

Not wanting to get into a big discussion on this, but this is working 
around
a bug either in our usage, the "schema", or pkg-audit. So for now just 
split
things up.

Thanks.

On 2014-04-30 12:51, Olli Hauer wrote:
> Author: ohauer
> Date: Wed Apr 30 17:51:29 2014
> New Revision: 352694
> URL: http://svnweb.freebsd.org/changeset/ports/352694
> QAT: https://qat.redports.org/buildarchive/r352694/
> 
> Log:
>   - fix some entries so they are really detected
>     by old and new pkg audit tools
> 
>   Approved by:	portmgr (bdrewery)
> 
> Modified:
>   head/security/vuxml/vuln.xml
> 
> Modified: head/security/vuxml/vuln.xml
> ==============================================================================
> --- head/security/vuxml/vuln.xml	Wed Apr 30 17:43:50 2014	(r352693)
> +++ head/security/vuxml/vuln.xml	Wed Apr 30 17:51:29 2014	(r352694)
> @@ -40,6 +40,10 @@ QUICK GUIDE TO ADDING A NEW ENTRY
>  4. fix any errors
>  5. profit!
> 
> +Addtional tests can be done this way:
> + $ env PKG_DBDIR=/usr/ports/security/vuxml pkg audit py26-django-1.6
> + $ env PKG_DBDIR=/usr/ports/security/vuxml pkg audit py27-django-1.6.1
> +
>  Extensive documentation of the format and help with writing and 
> verifying
>  a new entry is available in The Porter's Handbook at:
> 
> @@ -228,35 +232,81 @@ Note:  Please add new entries to the beg
>      <affects>
>        <package>
>  	<name>py26-django</name>
> +	<range><ge>1.6</ge><lt>1.6.3</lt></range>
> +      </package>
> +      <package>
>  	<name>py27-django</name>
> +	<range><ge>1.6</ge><lt>1.6.3</lt></range>
> +      </package>
> +      <package>
>  	<name>py31-django</name>
> +	<range><ge>1.6</ge><lt>1.6.3</lt></range>
> +      </package>
> +      <package>
>  	<name>py32-django</name>
> +	<range><ge>1.6</ge><lt>1.6.3</lt></range>
> +      </package>
> +      <package>
>  	<name>py33-django</name>
> +	<range><ge>1.6</ge><lt>1.6.3</lt></range>
> +      </package>
> +      <package>
>  	<name>py34-django</name>
>  	<range><ge>1.6</ge><lt>1.6.3</lt></range>
> -	<range><ge>1.5</ge><lt>1.5.6</lt></range>
> -	<range><ge>1.4</ge><lt>1.4.11</lt></range>
>        </package>
>        <package>
>  	<name>py26-django15</name>
> +	<range><ge>1.5</ge><lt>1.5.6</lt></range>
> +      </package>
> +      <package>
>  	<name>py27-django15</name>
> +	<range><ge>1.5</ge><lt>1.5.6</lt></range>
> +      </package>
> +      <package>
>  	<name>py31-django15</name>
> +	<range><ge>1.5</ge><lt>1.5.6</lt></range>
> +      </package>
> +      <package>
>  	<name>py32-django15</name>
> +	<range><ge>1.5</ge><lt>1.5.6</lt></range>
> +      </package>
> +      <package>
>  	<name>py33-django15</name>
> +	<range><ge>1.5</ge><lt>1.5.6</lt></range>
> +      </package>
> +      <package>
>  	<name>py34-django15</name>
>  	<range><ge>1.5</ge><lt>1.5.6</lt></range>
>        </package>
>        <package>
>  	<name>py26-django14</name>
> +	<range><ge>1.4</ge><lt>1.4.11</lt></range>
> +      </package>
> +      <package>
>  	<name>py27-django14</name>
> +	<range><ge>1.4</ge><lt>1.4.11</lt></range>
> +      </package>
> +      <package>
>  	<name>py31-django14</name>
> +	<range><ge>1.4</ge><lt>1.4.11</lt></range>
> +      </package>
> +      <package>
>  	<name>py32-django14</name>
> +	<range><ge>1.4</ge><lt>1.4.11</lt></range>
> +      </package>
> +      <package>
>  	<name>py33-django14</name>
> +	<range><ge>1.4</ge><lt>1.4.11</lt></range>
> +      </package>
> +      <package>
>  	<name>py34-django14</name>
>  	<range><ge>1.4</ge><lt>1.4.11</lt></range>
>        </package>
>        <package>
>  	<name>py26-django-devel</name>
> +	<range><lt>20140423,1</lt></range>
> +      </package>
> +      <package>
>  	<name>py27-django-devel</name>
>  	<range><lt>20140423,1</lt></range>
>        </package>
> @@ -282,7 +332,7 @@ Note:  Please add new entries to the beg
>      <dates>
>        <discovery>2014-04-21</discovery>
>        <entry>2014-04-23</entry>
> -      <modified>2014-04-24</modified>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -403,6 +453,9 @@ Note:  Please add new entries to the beg
>      <affects>
>        <package>
>  	<name>openldap24-client</name>
> +	<range><lt>2.4.18</lt></range>
> +      </package>
> +      <package>
>  	<name>linux-f10-openldap</name>
>  	<range><lt>2.4.18</lt></range>
>        </package>
> @@ -434,6 +487,9 @@ Note:  Please add new entries to the beg
>      <affects>
>        <package>
>  	<name>curl</name>
> +	<range><ge>7.10.6</ge><le>7.21.6</le></range>
> +      </package>
> +      <package>
>  	<name>linux-f10-curl</name>
>  	<range><ge>7.10.6</ge><le>7.21.6</le></range>
>        </package>
> @@ -456,6 +512,7 @@ Note:  Please add new entries to the beg
>      <dates>
>        <discovery>2011-06-23</discovery>
>        <entry>2014-04-11</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -464,6 +521,9 @@ Note:  Please add new entries to the beg
>      <affects>
>        <package>
>  	<name>dbus-glib</name>
> +	<range><lt>0.100.1</lt></range>
> +      </package>
> +      <package>
>  	<name>linux-f10-dbus-glib</name>
>  	<range><lt>0.100.1</lt></range>
>        </package>
> @@ -488,6 +548,7 @@ Note:  Please add new entries to the beg
>      <dates>
>        <discovery>2013-02-15</discovery>
>        <entry>2014-04-11</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -496,6 +557,9 @@ Note:  Please add new entries to the beg
>      <affects>
>        <package>
>  	<name>nas</name>
> +	<range><lt>1.9.4</lt></range>
> +      </package>
> +      <package>
>  	<name>linux-f10-nas-libs</name>
>  	<range><lt>1.9.4</lt></range>
>        </package>
> @@ -527,6 +591,9 @@ Note:  Please add new entries to the beg
>      <affects>
>        <package>
>  	<name>libaudiofile</name>
> +	<range><lt>0.2.7</lt></range>
> +      </package>
> +      <package>
>  	<name>linux-f10-libaudiofile</name>
>  	<range><lt>0.2.7</lt></range>
>        </package>
> @@ -549,6 +616,7 @@ Note:  Please add new entries to the beg
>      <dates>
>        <discovery>2008-12-30</discovery>
>        <entry>2014-04-11</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -912,8 +980,10 @@ Note:  Please add new entries to the beg
>      <affects>
>        <package>
>  	<name>joomla2</name>
> -	<name>joomla3</name>
>  	<range><ge>2.5.*</ge><le>2.5.18</le></range>
> +      </package>
> +      <package>
> +	<name>joomla3</name>
>  	<range><ge>3.0.*</ge><le>3.2.2</le></range>
>        </package>
>      </affects>
> @@ -947,6 +1017,7 @@ Note:  Please add new entries to the beg
>      <dates>
>        <discovery>2014-03-01</discovery>
>        <entry>2014-03-23</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -1621,11 +1692,18 @@ Note:  Please add new entries to the beg
>      <affects>
>        <package>
>  	<name>gnutls</name>
> +	<range><lt>2.12.23_4</lt></range>
> +      </package>
> +      <package>
>  	<name>linux-f10-gnutls</name>
>  	<range><lt>2.12.23_4</lt></range>
>        </package>
>        <package>
>  	<name>gnutls-devel</name>
> +	<range><lt>3.1.22</lt></range>
> +	<range><gt>3.2.0</gt><lt>3.2.12</lt></range>
> +      </package>
> +      <package>
>  	<name>gnutls3</name>
>  	<range><lt>3.1.22</lt></range>
>  	<range><gt>3.2.0</gt><lt>3.2.12</lt></range>
> @@ -1661,7 +1739,7 @@ Note:  Please add new entries to the beg
>      <dates>
>        <discovery>2014-03-03</discovery>
>        <entry>2014-03-04</entry>
> -      <modified>2014-03-04</modified>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -1747,9 +1825,21 @@ Note:  Please add new entries to the beg
>      <affects>
>        <package>
>  	<name>subversion</name>
> +	<range><ge>1.3.0</ge><lt>1.7.16</lt></range>
>  	<range><ge>1.8.0</ge><lt>1.8.8</lt></range>
> +      </package>
> +      <package>
> +	<name>subversion16</name>
>  	<range><ge>1.3.0</ge><lt>1.7.16</lt></range>
>        </package>
> +      <package>
> +	<name>subversion17</name>
> +	<range><ge>1.3.0</ge><lt>1.7.16</lt></range>
> +      </package>
> +      <package>
> +	<name>subversion18</name>
> +	<range><ge>1.8.0</ge><lt>1.8.8</lt></range>
> +      </package>
>      </affects>
>      <description>
>        <body xmlns="http://www.w3.org/1999/xhtml">
> @@ -1771,6 +1861,7 @@ Note:  Please add new entries to the beg
>      <dates>
>        <discovery>2014-01-10</discovery>
>        <entry>2014-02-26</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -2760,16 +2851,25 @@ JavaScript code would be executed.</p>
>      <affects>
>        <package>
>  	<name>bind99</name>
> +	<range><lt>9.9.4.2</lt></range>
> +      </package>
> +      <package>
>  	<name>bind99-base</name>
>  	<range><lt>9.9.4.2</lt></range>
>        </package>
>        <package>
>  	<name>bind98</name>
> +	<range><lt>9.8.6.2</lt></range>
> +      </package>
> +      <package>
>  	<name>bind98-base</name>
>  	<range><lt>9.8.6.2</lt></range>
>        </package>
>        <package>
>  	<name>bind96</name>
> +	<range><lt>9.6.3.2.ESV.R10.2</lt></range>
> +      </package>
> +      <package>
>  	<name>bind96-base</name>
>  	<range><lt>9.6.3.2.ESV.R10.2</lt></range>
>        </package>
> @@ -2802,7 +2902,7 @@ JavaScript code would be executed.</p>
>      <dates>
>        <discovery>2014-01-08</discovery>
>        <entry>2014-01-13</entry>
> -      <modified>2014-01-15</modified>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -2957,6 +3057,9 @@ JavaScript code would be executed.</p>
>      <affects>
>        <package>
>  	<name>gnupg</name>
> +	<range><lt>1.4.16</lt></range>
> +      </package>
> +      <package>
>  	<name>gnupg1</name>
>  	<range><lt>1.4.16</lt></range>
>        </package>
> @@ -2993,7 +3096,7 @@ JavaScript code would be executed.</p>
>      <dates>
>        <discovery>2013-12-18</discovery>
>        <entry>2013-12-18</entry>
> -      <modified>2013-12-18</modified>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -3297,17 +3400,41 @@ JavaScript code would be executed.</p>
>      <affects>
>        <package>
>  	<name>rubygem-actionmailer</name>
> +	<range><lt>3.2.16</lt></range>
> +      </package>
> +      <package>
>  	<name>rubygem-actionpack</name>
> +	<range><lt>3.2.16</lt></range>
> +      </package>
> +      <package>
>  	<name>rubygem-activemodel</name>
> +	<range><lt>3.2.16</lt></range>
> +      </package>
> +      <package>
>  	<name>rubygem-activerecord</name>
> +	<range><lt>3.2.16</lt></range>
> +      </package>
> +      <package>
>  	<name>rubygem-activeresource</name>
> +	<range><lt>3.2.16</lt></range>
> +      </package>
> +      <package>
>  	<name>rubygem-activesupport</name>
> +	<range><lt>3.2.16</lt></range>
> +      </package>
> +      <package>
>  	<name>rubygem-rails</name>
> +	<range><lt>3.2.16</lt></range>
> +      </package>
> +      <package>
>  	<name>rubygem-railties</name>
>  	<range><lt>3.2.16</lt></range>
>        </package>
>        <package>
>  	<name>rubygem-actionpack4</name>
> +	<range><lt>4.0.2</lt></range>
> +      </package>
> +      <package>
>  	<name>rubygem-activesupport4</name>
>  	<range><lt>4.0.2</lt></range>
>        </package>
> @@ -3350,6 +3477,7 @@ JavaScript code would be executed.</p>
>      <dates>
>        <discovery>2013-12-03</discovery>
>        <entry>2013-12-08</entry>
> +      <modified>2014-04-23</modified>
>      </dates>
>    </vuln>
> 
> @@ -3453,8 +3581,10 @@ JavaScript code would be executed.</p>
>      <affects>
>        <package>
>  	<name>joomla2</name>
> -	<name>joomla3</name>
>  	<range><ge>2.5.*</ge><le>2.5.14</le></range>
> +      </package>
> +      <package>
> +	<name>joomla3</name>
>  	<range><ge>3.0.*</ge><le>3.1.5</le></range>
>        </package>
>      </affects>
> @@ -3483,6 +3613,7 @@ JavaScript code would be executed.</p>
>      <dates>
>        <discovery>2013-11-01</discovery>
>        <entry>2013-12-04</entry>
> +      <modified>2014-04-23</modified>
>      </dates>
>    </vuln>
> 
> @@ -4178,9 +4309,21 @@ JavaScript code would be executed.</p>
>      <affects>
>        <package>
>  	<name>py26-pycrypto</name>
> +	<range><lt>2.6.1</lt></range>
> +      </package>
> +      <package>
>  	<name>py27-pycrypto</name>
> +	<range><lt>2.6.1</lt></range>
> +      </package>
> +      <package>
>  	<name>py31-pycrypto</name>
> +	<range><lt>2.6.1</lt></range>
> +      </package>
> +      <package>
>  	<name>py32-pycrypto</name>
> +	<range><lt>2.6.1</lt></range>
> +      </package>
> +      <package>
>  	<name>py33-pycrypto</name>
>  	<range><lt>2.6.1</lt></range>
>        </package>
> @@ -4205,6 +4348,7 @@ JavaScript code would be executed.</p>
>      <dates>
>        <discovery>2013-10-17</discovery>
>        <entry>2013-10-19</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -4213,10 +4357,25 @@ JavaScript code would be executed.</p>
>      <affects>
>        <package>
>  	<name>zh-wordpress-zh_CN</name>
> +	<range><lt>3.6.1</lt></range>
> +      </package>
> +      <package>
>  	<name>zh-wordpress-zh_TW</name>
> +	<range><lt>3.6.1</lt></range>
> +      </package>
> +      <package>
>  	<name>de-wordpress</name>
> +	<range><lt>3.6.1</lt></range>
> +      </package>
> +      <package>
>  	<name>ja-wordpress</name>
> +	<range><lt>3.6.1</lt></range>
> +      </package>
> +      <package>
>  	<name>ru-wordpress</name>
> +	<range><lt>3.6.1</lt></range>
> +      </package>
> +      <package>
>  	<name>wordpress</name>
>  	<range><lt>3.6.1</lt></range>
>        </package>
> @@ -4251,6 +4410,7 @@ JavaScript code would be executed.</p>
>      <dates>
>        <discovery>2013-09-11</discovery>
>        <entry>2013-10-19</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -4288,11 +4448,18 @@ JavaScript code would be executed.</p>
>      <affects>
>        <package>
>  	<name>bugzilla</name>
> +	<range><ge>4.0.0</ge><lt>4.0.11</lt></range>
> +      </package>
> +      <package>
>  	<name>bugzilla40</name>
> -	<name>bugzilla42</name>
> -	<name>bugzilla44</name>
>  	<range><ge>4.0.0</ge><lt>4.0.11</lt></range>
> +      </package>
> +      <package>
> +	<name>bugzilla42</name>
>  	<range><ge>4.2.0</ge><lt>4.2.7</lt></range>
> +      </package>
> +      <package>
> +	<name>bugzilla44</name>
>  	<range><ge>4.4</ge><lt>4.4.1</lt></range>
>        </package>
>      </affects>
> @@ -4341,6 +4508,7 @@ JavaScript code would be executed.</p>
>      <dates>
>        <discovery>2013-10-16</discovery>
>        <entry>2013-10-17</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -4632,9 +4800,21 @@ affected..</p>
>      <affects>
>        <package>
>  	<name>py26-graphite-web</name>
> +	<range><ge>0.9.5</ge><lt>0.9.11</lt></range>
> +      </package>
> +      <package>
>  	<name>py27-graphite-web</name>
> +	<range><ge>0.9.5</ge><lt>0.9.11</lt></range>
> +      </package>
> +      <package>
>  	<name>py31-graphite-web</name>
> +	<range><ge>0.9.5</ge><lt>0.9.11</lt></range>
> +      </package>
> +      <package>
>  	<name>py32-graphite-web</name>
> +	<range><ge>0.9.5</ge><lt>0.9.11</lt></range>
> +      </package>
> +      <package>
>  	<name>py33-graphite-web</name>
>  	<range><ge>0.9.5</ge><lt>0.9.11</lt></range>
>        </package>
> @@ -4656,7 +4836,7 @@ affected..</p>
>      <dates>
>        <discovery>2013-08-21</discovery>
>        <entry>2013-09-30</entry>
> -      <modified>2013-09-30</modified>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -4665,12 +4845,19 @@ affected..</p>
>      <affects>
>        <package>
>  	<name>py26-django</name>
> +	<range><ge>1.5</ge><lt>1.5.4</lt></range>
> +	<range><ge>1.4</ge><lt>1.4.8</lt></range>
> +      </package>
> +      <package>
>  	<name>py27-django</name>
>  	<range><ge>1.5</ge><lt>1.5.4</lt></range>
>  	<range><ge>1.4</ge><lt>1.4.8</lt></range>
>        </package>
>        <package>
>  	<name>py26-django-devel</name>
> +	<range><lt>20130922,1</lt></range>
> +      </package>
> +      <package>
>  	<name>py27-django-devel</name>
>  	<range><lt>20130922,1</lt></range>
>        </package>
> @@ -4692,7 +4879,7 @@ affected..</p>
>      <dates>
>        <discovery>2013-09-15</discovery>
>        <entry>2013-09-22</entry>
> -      <modified>2013-09-30</modified>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -4926,12 +5113,19 @@ affected..</p>
>      <affects>
>        <package>
>  	<name>py26-django</name>
> +	<range><ge>1.5</ge><lt>1.5.3</lt></range>
> +	<range><ge>1.4</ge><lt>1.4.7</lt></range>
> +      </package>
> +      <package>
>  	<name>py27-django</name>
>  	<range><ge>1.5</ge><lt>1.5.3</lt></range>
>  	<range><ge>1.4</ge><lt>1.4.7</lt></range>
>        </package>
>        <package>
>  	<name>py26-django-devel</name>
> +	<range><lt>20130912,1</lt></range>
> +      </package>
> +      <package>
>  	<name>py27-django-devel</name>
>  	<range><lt>20130912,1</lt></range>
>        </package>
> @@ -4954,7 +5148,7 @@ affected..</p>
>      <dates>
>        <discovery>2013-09-10</discovery>
>        <entry>2013-09-12</entry>
> -      <modified>2013-09-30</modified>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -5182,6 +5376,9 @@ affected..</p>
>      <affects>
>        <package>
>  	<name>libgcrypt</name>
> +	<range><lt>1.5.3</lt></range>
> +      </package>
> +      <package>
>  	<name>linux-f10-libgcrypt</name>
>  	<range><lt>1.5.3</lt></range>
>        </package>
> @@ -5751,9 +5948,21 @@ affected..</p>
>        </package>
>        <package>
>  	<name>zh-wordpress-zh_CN</name>
> +	<range><lt>3.5.2</lt></range>
> +      </package>
> +      <package>
>  	<name>zh-wordpress-zh_TW</name>
> +	<range><lt>3.5.2</lt></range>
> +      </package>
> +      <package>
>  	<name>de-wordpress</name>
> +	<range><lt>3.5.2</lt></range>
> +      </package>
> +      <package>
>  	<name>ja-wordpress</name>
> +	<range><lt>3.5.2</lt></range>
> +      </package>
> +      <package>
>  	<name>ru-wordpress</name>
>  	<range><lt>3.5.2</lt></range>
>        </package>
> @@ -5791,6 +6000,7 @@ affected..</p>
>      <dates>
>        <discovery>2013-06-21</discovery>
>        <entry>2013-07-27</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -5799,11 +6009,17 @@ affected..</p>
>      <affects>
>        <package>
>  	<name>bind99</name>
> +	<range><gt>9.9.3</gt><lt>9.9.3.2</lt></range>
> +      </package>
> +      <package>
>  	<name>bind99-base</name>
>  	<range><gt>9.9.3</gt><lt>9.9.3.2</lt></range>
>        </package>
>        <package>
>  	<name>bind98</name>
> +	<range><gt>9.8.5</gt><lt>9.8.5.2</lt></range>
> +      </package>
> +      <package>
>  	<name>bind98-base</name>
>  	<range><gt>9.8.5</gt><lt>9.8.5.2</lt></range>
>        </package>
> @@ -8576,8 +8792,17 @@ affected..</p>
>      <affects>
>        <package>
>  	<name>opera</name>
> +	<range><lt>12.15</lt></range>
> +      </package>
> +      <package>
>  	<name>opera-devel</name>
> +	<range><lt>12.15</lt></range>
> +      </package>
> +      <package>
>  	<name>linux-opera</name>
> +	<range><lt>12.15</lt></range>
> +      </package>
> +      <package>
>  	<name>linux-opera-devel</name>
>  	<range><lt>12.15</lt></range>
>        </package>
> @@ -8597,7 +8822,7 @@ affected..</p>
>      </references>
>      <dates>
>        <discovery>2013-04-04</discovery>
> -      <entry>2013-04-06</entry>
> +      <entry>2014-04-30</entry>
>      </dates>
>    </vuln>
> 
> @@ -10929,9 +11154,21 @@ affected..</p>
>        </package>
>        <package>
>  	<name>zh-wordpress-zh_CN</name>
> +	<range><lt>3.5.1</lt></range>
> +      </package>
> +      <package>
>  	<name>zh-wordpress-zh_TW</name>
> +	<range><lt>3.5.1</lt></range>
> +      </package>
> +      <package>
>  	<name>de-wordpress</name>
> +	<range><lt>3.5.1</lt></range>
> +      </package>
> +      <package>
>  	<name>ja-wordpress</name>
> +	<range><lt>3.5.1</lt></range>
> +      </package>
> +      <package>
>  	<name>ru-wordpress</name>
>  	<range><lt>3.5.1</lt></range>
>        </package>
> @@ -10968,6 +11205,7 @@ affected..</p>
>      <dates>
>        <discovery>2013-01-24</discovery>
>        <entry>2013-01-29</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -11977,8 +12215,17 @@ executed in your Internet Explorer while
>      <affects>
>        <package>
>  	<name>opera</name>
> +	<range><lt>12.12</lt></range>
> +      </package>
> +      <package>
>  	<name>opera-devel</name>
> +	<range><lt>12.12</lt></range>
> +      </package>
> +      <package>
>  	<name>linux-opera</name>
> +	<range><lt>12.12</lt></range>
> +      </package>
> +      <package>
>  	<name>linux-opera-devel</name>
>  	<range><lt>12.12</lt></range>
>        </package>
> @@ -12003,6 +12250,7 @@ executed in your Internet Explorer while
>      <dates>
>        <discovery>2012-12-18</discovery>
>        <entry>2012-12-18</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -12450,8 +12698,17 @@ executed in your Internet Explorer while
>      <affects>
>        <package>
>  	<name>opera</name>
> +	<range><lt>12.11</lt></range>
> +      </package>
> +      <package>
>  	<name>opera-devel</name>
> +	<range><lt>12.11</lt></range>
> +      </package>
> +      <package>
>  	<name>linux-opera</name>
> +	<range><lt>12.11</lt></range>
> +      </package>
> +      <package>
>  	<name>linux-opera-devel</name>
>  	<range><lt>12.11</lt></range>
>        </package>
> @@ -12476,6 +12733,7 @@ executed in your Internet Explorer while
>      <dates>
>        <discovery>2012-11-19</discovery>
>        <entry>2012-11-22</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -13041,8 +13299,17 @@ executed in your Internet Explorer while
>      <affects>
>        <package>
>  	<name>opera</name>
> +	<range><lt>12.10</lt></range>
> +      </package>
> +      <package>
>  	<name>opera-devel</name>
> +	<range><lt>12.10</lt></range>
> +      </package>
> +      <package>
>  	<name>linux-opera</name>
> +	<range><lt>12.10</lt></range>
> +      </package>
> +      <package>
>  	<name>linux-opera-devel</name>
>  	<range><lt>12.10</lt></range>
>        </package>
> @@ -13075,6 +13342,7 @@ executed in your Internet Explorer while
>      <dates>
>        <discovery>2012-11-06</discovery>
>        <entry>2012-11-06</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -13604,6 +13872,9 @@ executed in your Internet Explorer while
>      <affects>
>        <package>
>  	<name>xlockmore</name>
> +	<range><lt>5.40_1</lt></range>
> +      </package>
> +      <package>
>  	<name>ja-xlockmore</name>
>  	<range><lt>5.40_1</lt></range>
>        </package>
> @@ -13626,6 +13897,7 @@ executed in your Internet Explorer while
>      <dates>
>        <discovery>2012-10-17</discovery>
>        <entry>2012-10-17</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -14186,11 +14458,17 @@ executed in your Internet Explorer while
>      <affects>
>        <package>
>  	<name>ImageMagick</name>
> +	<range><le>6.7.8.6</le></range>
> +      </package>
> +      <package>
>  	<name>ImageMagick-nox11</name>
>  	<range><le>6.7.8.6</le></range>
>        </package>
>        <package>
>  	<name>GraphicsMagick</name>
> +	<range><ge>1.3.0</ge><le>1.3.16</le></range>
> +      </package>
> +      <package>
>  	<name>GraphicsMagick-nox11</name>
>  	<range><ge>1.3.0</ge><le>1.3.16</le></range>
>        </package>
> @@ -14221,6 +14499,7 @@ executed in your Internet Explorer while
>      <dates>
>        <discovery>2012-07-28</discovery>
>        <entry>2012-09-20</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -16425,12 +16704,19 @@ executed in your Internet Explorer while
>      <affects>
>        <package>
>  	<name>py26-django</name>
> +	<range><ge>1.4</ge><lt>1.4.1</lt></range>
> +	<range><ge>1.3</ge><lt>1.3.2</lt></range>
> +      </package>
> +      <package>
>  	<name>py27-django</name>
>  	<range><ge>1.4</ge><lt>1.4.1</lt></range>
>  	<range><ge>1.3</ge><lt>1.3.2</lt></range>
>        </package>
>        <package>
>  	<name>py26-django-devel</name>
> +	<range><lt>20120731,1</lt></range>
> +      </package>
> +      <package>
>  	<name>py27-django-devel</name>
>  	<range><lt>20120731,1</lt></range>
>        </package>
> @@ -16460,7 +16746,7 @@ executed in your Internet Explorer while
>      <dates>
>        <discovery>2012-07-30</discovery>
>        <entry>2012-07-31</entry>
> -      <modified>2012-08-02</modified>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -17454,6 +17740,9 @@ executed in your Internet Explorer while
>      <affects>
>        <package>
>  	<name>ImageMagick</name>
> +	<range><lt>6.7.6.4</lt></range>
> +      </package>
> +      <package>
>  	<name>ImageMagick-nox11</name>
>  	<range><lt>6.7.6.4</lt></range>
>        </package>
> @@ -17479,6 +17768,7 @@ executed in your Internet Explorer while
>      <dates>
>        <discovery>2012-03-28</discovery>
>        <entry>2012-06-14</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>
> 
> @@ -18126,6 +18416,9 @@ executed in your Internet Explorer while
>      <affects>
>        <package>
>  	<name>libxml2</name>
> +	<range><lt>2.7.8_3</lt></range>
> +      </package>
> +      <package>
>  	<name>linux-f10-libxml2</name>
>  	<range><lt>2.7.8_3</lt></range>
>        </package>
> @@ -18155,6 +18448,7 @@ executed in your Internet Explorer while
>      <dates>
>        <discovery>2012-05-15</discovery>
>        <entry>2012-05-18</entry>
> +      <modified>2014-04-30</modified>
>      </dates>
>    </vuln>

-- 
Regards,
Bryan Drewery