Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 17 Aug 2024 09:50:11 +0200
From:      Alexander Leidinger <Alexander@Leidinger.net>
To:        Mathieu Arnold <mat@freebsd.org>
Cc:        Kevin Bowling <kevin.bowling@kev009.com>, Gleb Popov <arrowd@freebsd.org>, Vladimir Druzenko <vvd@freebsd.org>, ports-committers@freebsd.org, dev-commits-ports-all@freebsd.org, dev-commits-ports-main@freebsd.org
Subject:   =?UTF-8?Q?Re=3A_git=3A_72dd8d2ee676_-_main_-_mail/dovecot=3A_upd?= =?UTF-8?Q?ate_2=2E3=2E21_=E2=86=92_2=2E3=2E21=2E1_=28fixes_2_CVEs=29?=
Message-ID:  <057384a74426fde1ce68015d76d6befb@Leidinger.net>
In-Reply-To: <modpdqcgboxfbiu2fmwiunp6mntsr2rpwtbsjszdwbj3i7qtwh@glauhvjtgaho>
References:  <202408161835.47GIZuZJ084942@gitrepo.freebsd.org> <CAK7dMtD6gZ0dHhu8edEs%2BH1wEdKbeE4%2B6L%2BRDCbBRuHj5WJ5fA@mail.gmail.com> <5b4df306-2998-4f98-b5fa-8bf168cd011a@freebsd.org> <CAK7dMtDpKJjLYheA77QY_5TKG2uEsLWtcGwSz%2Bqp4%2BNYuwDqNg@mail.gmail.com> <CALH631nO0v9-8MqsqJ2uY4KhquixJALteJ=-690hDRjhP=wEhA@mail.gmail.com> <CAK7dMtBJ59N4PnrMVqbWA5=bBDpuuSdy6x2wTxTgBvd3dL=_Gg@mail.gmail.com> <modpdqcgboxfbiu2fmwiunp6mntsr2rpwtbsjszdwbj3i7qtwh@glauhvjtgaho>

next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)

--=_eee449d43b525d4da8231895232cdacc
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII;
 format=flowed

Am 2024-08-17 09:26, schrieb Mathieu Arnold:
> On Sat, Aug 17, 2024 at 12:15:54AM GMT, Kevin Bowling wrote:

>> I'm not really sure why this is turning into a discussion.  The
>> request is standard practice for handling CVEs in the repo and a
>> courtesy to other committers and even more for users who rely on tools
>> like pkg audit and do not watch commit logs.
> 
> Technically, it does not need to be a discussion. Maintaining the VuXML
> database is ports-secteam's job, it's in their charter.
> 
> Now, ports-secteam has no members, so nobody is maintaining the VuXML
> database.
> 
> Ports committers can update it, but they have absolutely no obligation
> to, it's on a best effort basis.

An entry for dovecot is committed to vuxml.

Bye,
Alexander.

-- 
http://www.Leidinger.net Alexander@Leidinger.net: PGP 0x8F31830F9F2772BF
http://www.FreeBSD.org    netchild@FreeBSD.org  : PGP 0x8F31830F9F2772BF

--=_eee449d43b525d4da8231895232cdacc
Content-Type: application/pgp-signature;
 name=signature.asc
Content-Disposition: attachment;
 filename=signature.asc;
 size=833
Content-Description: OpenPGP digital signature

-----BEGIN PGP SIGNATURE-----
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=IjE7
-----END PGP SIGNATURE-----

--=_eee449d43b525d4da8231895232cdacc--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?057384a74426fde1ce68015d76d6befb>