Date: Wed, 23 Sep 2015 17:44:23 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-ports-bugs@FreeBSD.org Subject: [Bug 203227] vuln.xml incorrectly flagging ruby20 as insecure Message-ID: <bug-203227-13-1V1aRag60p@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-203227-13@https.bugs.freebsd.org/bugzilla/> References: <bug-203227-13@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203227 --- Comment #15 from Mark Felder <feld@FreeBSD.org> --- (In reply to terry from comment #13) You're right, it would fail because our <ge> entries don't have ,1 for the PORTEPOCH <package> <name>ruby</name> <name>ruby20</name> <range><ge>2.0,1</ge><lt>2.0.0.645,1</lt></range> </package> <package> <name>ruby</name> <range><ge>2.1,1</ge><lt>2.1.6,1</lt></range> </package> <package> <name>ruby</name> <name>ruby22</name> <range><ge>2.2,1</ge><lt>2.2.2,1</lt></range> </package> Try that. It seems to be working when I pass various ruby versions to pkg audit. -- You are receiving this mail because: You are on the CC list for the bug.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-203227-13-1V1aRag60p>