ports/129000: [vuxml] mail/dovecot: document CVE-2008-4577 and CVE-2008-4578

Eygene Ryabinkin rea-fbsd at codelabs.ru
Wed Nov 19 15:16:11 PST 2008


Xin, good day.

Wed, Nov 19, 2008 at 10:37:12PM +0000, delphij at FreeBSD.org wrote:
> Synopsis: [vuxml] mail/dovecot: document CVE-2008-4577 and CVE-2008-4578
> 
> State-Changed-From-To: open->closed
> State-Changed-By: delphij
> State-Changed-When: Wed Nov 19 22:36:55 UTC 2008
> State-Changed-Why: 
> Committed with some changes, thanks!

Thanks for handling this.  But I have a question: what is the general
policy about versions that are to be documented within the 'range'
clauses?  You had changed version specification to '1.1.4', but it was
never been in the FreeBSD ports tree.  So, should we specify only
existing port versions or we can specify vendor-specific versions as
well, provided that the specification will be the same from the point of
view of the port version evolution?

Thanks again!
-- 
Eygene
 _                ___       _.--.   #
 \`.|\..----...-'`   `-._.-'_.-'`   #  Remember that it is hard
 /  ' `         ,       __.--'      #  to read the on-line manual   
 )/' _/     \   `-_,   /            #  while single-stepping the kernel.
 `-'" `"\_  ,_.-;_.-\_ ',  fsc/as   #
     _.-'_./   {_.'   ; /           #    -- FreeBSD Developers handbook 
    {_.-``-'         {_/            #
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20081119/4989b057/attachment.pgp


More information about the freebsd-security mailing list