Date: Mon, 4 Mar 2019 11:45:24 +0100 From: Jochen Neumeister <joneum@FreeBSD.org> To: Tobias Kortkamp <tobik@freebsd.org> Cc: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: Re: svn commit: r494571 - head/www/mybb Message-ID: <93163fa6-4dd2-d8fe-6a41-9d7b8f7e04ed@FreeBSD.org> In-Reply-To: <20190304104300.GA61251@urd.tobik.me> References: <201903041002.x24A2c3F085833@repo.freebsd.org> <20190304104300.GA61251@urd.tobik.me>
next in thread | previous in thread | raw e-mail | index | archive | help
On 04.03.19 11:43, Tobias Kortkamp wrote: > On Mon, Mar 04, 2019 at 10:02:38AM +0000, Jochen Neumeister wrote: >> Author: joneum >> Date: Mon Mar 4 10:02:38 2019 >> New Revision: 494571 >> URL: https://svnweb.freebsd.org/changeset/ports/494571 >> >> Log: >> in r494382, et to update GH_TAGNAME. This fixes it >> >> MFH: 2019Q1 >> Security: 395ed9d5-3cca-11e9-9ba0-4c72b94353b5 >> Sponsored by: Netzkommune GmbH >> >> Modified: >> head/www/mybb/Makefile >> head/www/mybb/distinfo >> head/www/mybb/pkg-plist >> >> Modified: head/www/mybb/Makefile >> ============================================================================== >> --- head/www/mybb/Makefile Mon Mar 4 09:45:56 2019 (r494570) >> +++ head/www/mybb/Makefile Mon Mar 4 10:02:38 2019 (r494571) >> @@ -11,7 +11,7 @@ COMMENT= PHP-based bulletin board / discussion forum s >> LICENSE= GPLv3 >> >> USE_GITHUB= yes >> -GH_TAGNAME= ${PORTNAME}_1819 >> +GH_TAGNAME= ${PORTNAME}_1820 > Do you plan to update vuxml too? Our mybb-1.8.20 is mybb-1.8.19 > in reality which is still vulnerable, but is not marked as such by > pkg audit. > > $ pkg audit mybb-1.8.19 > mybb-1.8.19 is vulnerable: > mybb -- vulnerabilities > WWW: https://vuxml.FreeBSD.org/freebsd/395ed9d5-3cca-11e9-9ba0-4c72b94353b5.html > > 1 problem(s) in the installed packages found. > > $ pkg audit mybb-1.8.20 > 0 problem(s) in the installed packages found. > 1.8.20 is in vuxml: + <range><lt>1.8.20</lt></range>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?93163fa6-4dd2-d8fe-6a41-9d7b8f7e04ed>