From owner-svn-ports-head@FreeBSD.ORG  Tue Dec 16 08:34:01 2014
Return-Path: <owner-svn-ports-head@FreeBSD.ORG>
Delivered-To: svn-ports-head@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 3896FC3A;
 Tue, 16 Dec 2014 08:34:01 +0000 (UTC)
Received: from mailrelay002.isp.belgacom.be (mailrelay002.isp.belgacom.be
 [195.238.6.175]) by mx1.freebsd.org (Postfix) with ESMTP id 5DAF7B8B;
 Tue, 16 Dec 2014 08:33:59 +0000 (UTC)
X-Belgacom-Dynamic: yes
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AvgGAKTtj1RbsIuB/2dsb2JhbABagwZSTQvFdoVyAoEZFwEBAQEBfYQNAQUnExwjEAsOBgQJJQ8qHgYTCYgnAQjUWQEBAQEBAQEDAQEBAQEBARuPPzMHhCkFkUCFMJE6IoNtPTCCQwEBAQ
Received: from 129.139-176-91.adsl-dyn.isp.belgacom.be (HELO
 kalimero.tijl.coosemans.org) ([91.176.139.129])
 by relay.skynet.be with ESMTP; 16 Dec 2014 09:33:52 +0100
Received: from kalimero.tijl.coosemans.org (kalimero.tijl.coosemans.org
 [127.0.0.1])
 by kalimero.tijl.coosemans.org (8.14.9/8.14.9) with ESMTP id sBG8XpZt001139;
 Tue, 16 Dec 2014 09:33:51 +0100 (CET)
 (envelope-from tijl@FreeBSD.org)
Date: Tue, 16 Dec 2014 09:33:51 +0100
From: Tijl Coosemans <tijl@FreeBSD.org>
To: Olli Hauer <ohauer@FreeBSD.org>
Subject: Re: svn commit: r374768 - head/security/vuxml
Message-ID: <20141216093351.0d937c77@kalimero.tijl.coosemans.org>
In-Reply-To: <201412152218.sBFMIoZA041646@svn.freebsd.org>
References: <201412152218.sBFMIoZA041646@svn.freebsd.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Cc: svn-ports-head@freebsd.org, svn-ports-all@freebsd.org,
 ports-committers@freebsd.org
X-BeenThere: svn-ports-head@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: SVN commit messages for the ports tree for head
 <svn-ports-head.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/svn-ports-head>,
 <mailto:svn-ports-head-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-ports-head/>
List-Post: <mailto:svn-ports-head@freebsd.org>
List-Help: <mailto:svn-ports-head-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-ports-head>,
 <mailto:svn-ports-head-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Dec 2014 08:34:01 -0000

On Mon, 15 Dec 2014 22:18:50 +0000 (UTC) Olli Hauer <ohauer@FreeBSD.org> wrote:
> Author: ohauer
> Date: Mon Dec 15 22:18:49 2014
> New Revision: 374768
> URL: https://svnweb.freebsd.org/changeset/ports/374768
> QAT: https://qat.redports.org/buildarchive/r374768/
> 
> Log:
>   - document Subversion remote DoS
> 
> Modified:
>   head/security/vuxml/vuln.xml
> 
> Modified: head/security/vuxml/vuln.xml
> ==============================================================================
> --- head/security/vuxml/vuln.xml	Mon Dec 15 21:59:19 2014	(r374767)
> +++ head/security/vuxml/vuln.xml	Mon Dec 15 22:18:49 2014	(r374768)
> @@ -57,6 +57,45 @@ Notes:
>  
>  -->
>  <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
> +  <vuln vid="f5561ade-846c-11e4-b7a7-20cf30e32f6d">
> +    <topic>subversion -- DoS vulnerabilities</topic>
> +    <affects>
> +      <package>
> +	<name>subversion17</name>
> +	<range><ge>1.0.0</ge><lt>1.7.19</lt></range>
> +      </package>

Maybe add subversion16 as well:

      <package>
	<name>subversion16</name>
	<range><ge>1.0.0</ge><lt>1.7.19</lt></range>
      </package>