From owner-cvs-ports@FreeBSD.ORG  Mon Jan 16 05:57:40 2012
Return-Path: <owner-cvs-ports@FreeBSD.ORG>
Delivered-To: cvs-ports@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id DA1B41065673;
	Mon, 16 Jan 2012 05:57:40 +0000 (UTC)
	(envelope-from ohauer@FreeBSD.org)
Received: from p578be941.dip0.t-ipconnect.de (p578be941.dip0.t-ipconnect.de
	[87.139.233.65])
	by mx1.freebsd.org (Postfix) with ESMTP id 961948FC13;
	Mon, 16 Jan 2012 05:57:40 +0000 (UTC)
Received: from [192.168.0.100] (cde1100.uni.vrs [192.168.0.100])
	(Authenticated sender: ohauer)
	by p578be941.dip0.t-ipconnect.de (Postfix) with ESMTPSA id E2A3C20831; 
	Mon, 16 Jan 2012 06:57:36 +0100 (CET)
Message-ID: <4F13BC56.9070104@FreeBSD.org>
Date: Mon, 16 Jan 2012 06:57:42 +0100
From: Olli Hauer <ohauer@FreeBSD.org>
User-Agent: Mozilla/5.0 (Windows NT 5.1;
	rv:9.0) Gecko/20111222 Thunderbird/9.0.1
MIME-Version: 1.0
To: Akinori MUSHA <knu@FreeBSD.org>
References: <201201160316.q0G3G2Za077404@repoman.freebsd.org>
In-Reply-To: <201201160316.q0G3G2Za077404@repoman.freebsd.org>
X-Enigmail-Version: 1.3.4
Content-Type: text/plain; charset=ISO-8859-15
Content-Transfer-Encoding: 7bit
Cc: cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org, ports-committers@FreeBSD.org
Subject: Re: cvs commit: ports/security/vuxml vuln.xml
X-BeenThere: cvs-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: ohauer@FreeBSD.org
List-Id: CVS commit messages for the ports tree <cvs-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-ports>
List-Post: <mailto:cvs-ports@freebsd.org>
List-Help: <mailto:cvs-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Jan 2012 05:57:40 -0000

On 2012-01-16 04:16, Akinori MUSHA wrote:
> knu         2012-01-16 03:16:01 UTC
> 
>   FreeBSD ports repository
> 
>   Modified files:
>     security/vuxml       vuln.xml 
>   Log:
>   Add PHP < 5.3.9 (CVE-2011-4885).
>   
>   Revision  Changes    Path
>   1.2549    +6 -1      ports/security/vuxml/vuln.xml
> 

I think this entry is not needed since it's already tracked
as vid="d3921810-3c80-11e1-97e8-00215c6a37bb"

+      <package>
+	<name>php5</name>
+	<range><lt>5.3.9</lt></range>
+      </package>
...
+      <cvename>CVE-2011-4885</cvename>


Existing entry:

  *<vuln vid="d3921810-3c80-11e1-97e8-00215c6a37bb">*
    <topic>php -- multiple vulnerabilities</topic>
    <affects>
      <package>
        *<name>php5</name>*
        <name>php5-exif</name>
        <range><lt>5.3.9</lt></range>
      </package>
...
    <references>
      <cvename>CVE-2011-4566</cvename>
      *<cvename>CVE-2011-4885</cvename>*
      <url>http://www.nruns.com/_downloads/advisory28122011.pdf</url>
    </references>
...