Date: Thu, 26 Jul 2007 09:44:02 +0100 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: "Phillip N." <pneumann@gmail.com> Cc: Freebsd-vuxml@freebsd.org Subject: Re: ports/114906: [PATCH] update net/asterisk to 1.4.9 Message-ID: <46A85ED2.7090407@infracaninophile.co.uk> In-Reply-To: <1185374634.19856@negro.transtel.cl> References: <1185374634.19856@negro.transtel.cl>
next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Phillip N. wrote: > The motivation of the update is this: > http://ftp.digium.com/pub/asa/ASA-2007-018.pdf > "Exhaustion vulnerability in IAX2 channel driver" > > the vulxml contains two thing i cannot figure out. > These are: > - vid (how is the id generated?) <vid> is the VuXML ID -- it's a unique tag per entry that can be used in eg. URLs. See uuidgen(1) for how to generate one. > - bid (what is it?) <bid> stands for 'Bugtraq ID' -- it's the reference number used on this site to identify the issue: http://www.securityfocus.com/ There are a number of other security related web sites that the VuXML markup caters for, as well as arbitrary URLs. None of them are compulsory to have in a <references> section, but all relevant references should be provided. See Jaques Vidrine's presentation for more info -- at http://www.vuxml.org/files/VuXML_BSDCan.pdf Cheers, Matthew - -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGqF7S8Mjk52CukIwRCGSXAKCLdPGQYx+iCFrs+KfJzGE+PI7/6gCdHKDR Zia7H/D3lnaiDr2D3BbGvUM= =7EqW -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?46A85ED2.7090407>