From owner-cvs-all@FreeBSD.ORG  Mon Apr 30 18:15:16 2012
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 4BD36106566B;
	Mon, 30 Apr 2012 18:15:16 +0000 (UTC)
	(envelope-from delphij@delphij.net)
Received: from anubis.delphij.net (anubis.delphij.net
	[IPv6:2001:470:1:117::25])
	by mx1.freebsd.org (Postfix) with ESMTP id 2B9488FC17;
	Mon, 30 Apr 2012 18:15:16 +0000 (UTC)
Received: from delta.delphij.net (drawbridge.ixsystems.com [206.40.55.65])
	(using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
	(No client certificate requested)
	by anubis.delphij.net (Postfix) with ESMTPSA id D5C69112FD;
	Mon, 30 Apr 2012 11:15:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=delphij.net; s=anubis;
	t=1335809716; bh=hexVVQO8+gfcoSLq6Bl3BMP6RPpTMHoSN6J0AQyW+wE=;
	h=Date:From:Reply-To:To:CC:Subject:References:In-Reply-To;
	b=1YmUQT4rqReY7R+idKP2itTZLCtDmJEUagncyXhUITKUjXWjOo5lncUKdmaadLlIR
	qkyEh7q+aR+As9WYbPliZrqZAmsXXq3Yz0iJwLofE4mUrNH2ezukvAd6Ruo5u5cZF5
	MqBg105Hd+MVUfulb0+7QBMmq8ER0Bwu/jTI6KEg=
Message-ID: <4F9ED6B3.2020508@delphij.net>
Date: Mon, 30 Apr 2012 11:15:15 -0700
From: Xin Li <delphij@delphij.net>
Organization: The FreeBSD Project
MIME-Version: 1.0
To: Chris Rees <crees@FreeBSD.org>
References: <201204301751.q3UHpk86034193@repoman.freebsd.org>
	<CADLo83_kd57+Mh0m_011JXA9aQ_2e3HAVo7uFSVn2ZSLxi25DA@mail.gmail.com>
In-Reply-To: <CADLo83_kd57+Mh0m_011JXA9aQ_2e3HAVo7uFSVn2ZSLxi25DA@mail.gmail.com>
X-Enigmail-Version: 1.5pre
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: d@delphij.net, cvs-ports@freebsd.org, Xin LI <delphij@freebsd.org>,
	cvs-all@freebsd.org, ports-committers@freebsd.org
Subject: Re: cvs commit: ports/security/vuxml vuln.xml
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: d@delphij.net
List-Id: **OBSOLETE** CVS commit messages for the entire tree
	<cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Apr 2012 18:15:16 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 04/30/12 11:08, Chris Rees wrote:
> On 30 April 2012 17:51, Xin LI <delphij@freebsd.org> wrote:
>> delphij     2012-04-30 17:51:46 UTC
>> 
>> FreeBSD ports repository
>> 
>> Modified files: security/vuxml       vuln.xml Log: Document samba
>> incorrect permission checks vulnerability.
> 
> +	<range><gt>3.4.*</gt><lt>3.4.17</lt></range> +      </package> +
> <package> +	<name>samba35</name> +
> <range><gt>3.5.*</gt><lt>3.5.15</lt></range> +      </package> +
> <package> +	<name>samba36</name> +
> <range><gt>3.6.*</gt><lt>3.6.5</lt></range>
> 
> Don't you want to use <ge /> for the minimum versions in each
> range?

That's a good question, frankly I'm not sure...

I used gt here because * means -NaN to me (and there is no >= -NaN but
only > -NaN), plus, older entries do this, too.  It would probably a
good idea to use <ge>3.6.0<ge> instead, though.

Cheers,
- -- 
Xin LI <delphij@delphij.net>	https://www.delphij.net/
FreeBSD - The Power to Serve!		Live free or die
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)

iQEcBAEBCAAGBQJPntazAAoJEG80Jeu8UPuzgPUH/iUojCv1Vjovrv3VB6oY+kWO
uS7AQRibXZ8OxkmgAZ9R3Ruf7PvNMposQk6uv07XiJ1gMX2cmdsPWAL3CFWGsP6i
0eFti5ZglFrmxYEULjLxIyTlcPFnk5GSGxA1ruK1SVTp2KHvQojY+A3ciDCFgvnA
Ab4iR2F+kEh8mVeKjGrCx2amEITOkoi5hLLNxFiQs3bQ8qeZtb7ibFXcOOXvKml2
lfgwIQBjSXB76wugjJsECor+45h7/cWX9a5XvQSxmWpL2JsSQhZp61gyU0bHBJ+O
oXNhLVGcNh1+esLPrpln9t1G2TMAPxP7rMhTPBM51nj1+aYp1+pjN2vzsjrLFN8=
=82CH
-----END PGP SIGNATURE-----