Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 7 Sep 2011 20:38:01 +0100
From:      Chris Rees <crees@freebsd.org>
To:        Xin LI <delphij@freebsd.org>
Cc:        cvs-ports@freebsd.org, cvs-all@freebsd.org, ports-committers@freebsd.org
Subject:   Re: cvs commit: ports/security/vuxml vuln.xml
Message-ID:  <CADLo83-Dsh_NR1HDnYtr7fn_J2GSYbriV_YqvC5%2BRA-9XvzfXA@mail.gmail.com>
In-Reply-To: <201109071830.p87IUg4T031545@repoman.freebsd.org>
References:  <201109071830.p87IUg4T031545@repoman.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 7 September 2011 19:30, Xin LI <delphij@freebsd.org> wrote:
> delphij =A0 =A0 2011-09-07 18:30:42 UTC
>
> =A0FreeBSD ports repository
>
> =A0Modified files:
> =A0 =A0security/vuxml =A0 =A0 =A0 vuln.xml
> =A0Log:
> =A0Document two OpenSSL vulnerabilities.
>
> =A0(There is no OpenSSL 0.9.8s in the ports so mark <1.0.0 as vulnerable)=
.

<range><ge>1.0.0</ge><lt>1.0.0_6</lt></range>
<range><ge>0.9.8</ge><lt>1.0.0</lt></range>

I'm sure there's a simple answer, but why not use:

<range><ge>0.9.8</ge><lt>1.0.0_6</lt></range>

? Perhaps your explanation was in the comment above, but I couldn't
quite understand it...

Chris



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CADLo83-Dsh_NR1HDnYtr7fn_J2GSYbriV_YqvC5%2BRA-9XvzfXA>