cvs commit: ports/security/vuxml vuln.xml
Jacques A. Vidrine
nectar at FreeBSD.org
Thu May 6 09:01:35 PDT 2004
On Thu, May 06, 2004 at 08:43:53AM -0700, Oliver Eikemeier wrote:
> eik 2004/05/06 08:43:53 PDT
>
> FreeBSD ports repository
>
> Modified files:
> security/vuxml vuln.xml
> Log:
> exim buffer overflow when verify = header_syntax is used
>
> Revision Changes Path
> 1.90 +27 -0 ports/security/vuxml/vuln.xml
Thanks!
Actually, there are two bugs: CAN-2004-0399 CAN-2004-0400
Were both of these fixed?
Also, the package names and versions are not quite right.
You wrote:
<package>
<name>exim{,-ldap2,-mysql,-postgresql}</name>
<range>
<lt>exim-4.33+20_1</lt>
</range>
</package>
The name is not valid.
The version should not include the name again.
I think what you meant was:
<package>
<name>exim</name>
<name>exim-ldap2</name>
<name>exim-mysql</name>
<name>exim-postgresql</name>
<range><lt>4.33+20_1</lt></range>
</package>
Cheers,
--
Jacques Vidrine / nectar at celabo.org / jvidrine at verio.net / nectar at freebsd.org
More information about the cvs-all
mailing list