Date: Wed, 08 Feb 2023 04:04:34 +0100 From: Jan Beich <jbeich@FreeBSD.org> To: Koichiro Iwao <meta@FreeBSD.org> Cc: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: Re: git: 61cd6326134c - main - security/vuxml: Document TightVNC multiplevulnerability Message-ID: <cz6k-svr1-wny@FreeBSD.org> In-Reply-To: <202302080232.3182W3dG080843@gitrepo.freebsd.org> (Koichiro Iwao's message of "Wed, 8 Feb 2023 02:32:03 GMT") References: <202302080232.3182W3dG080843@gitrepo.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Koichiro Iwao <meta@FreeBSD.org> writes:
> + <package>
> + <name>tightvnc</name>
> + <range><le>1.3.10</le></range>
> + </package>
This misses PORTREVISION > 0 e.g.,
$ xmllint -noent security/vuxml/vuln.xml > /tmp/vuln-flat.xml
$ pkg audit -f /tmp/vuln-flat.xml $(make -V PKGNAME -C net/tightvnc)
0 problem(s) in 0 installed package(s) found.
diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml
index 90b6b75e2d17..d3f2cb23fe63 100644
--- a/security/vuxml/vuln/2023.xml
+++ b/security/vuxml/vuln/2023.xml
@@ -3,7 +3,7 @@
<affects>
<package>
<name>tightvnc</name>
- <range><le>1.3.10</le></range>
+ <range><le>1.3.10_6</le></range>
</package>
</affects>
<description>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?cz6k-svr1-wny>