git: c359dd16769f - main - security/vuxml: fix the version of *-commons-httpclient

From: Ronald Klop <ronald_at_FreeBSD.org>
Date: Fri, 10 Jul 2026 13:34:30 UTC
The branch main has been updated by ronald:

URL: https://cgit.FreeBSD.org/ports/commit/?id=c359dd16769f8f52b8c63cf3130bc2d2b9bf2630

commit c359dd16769f8f52b8c63cf3130bc2d2b9bf2630
Author:     Ronald Klop <ronald@FreeBSD.org>
AuthorDate: 2026-07-10 13:31:43 +0000
Commit:     Ronald Klop <ronald@FreeBSD.org>
CommitDate: 2026-07-10 13:34:23 +0000

    security/vuxml: fix the version of *-commons-httpclient
    
    I learned that <eq> does not match portrevision, so <ge> works better.
    And CVE-2020-13956 only mentions 3.1 and later and not earlier CPE versions.
---
 security/vuxml/vuln/2026.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml
index 501ad8f39c4c..7de38cab769e 100644
--- a/security/vuxml/vuln/2026.xml
+++ b/security/vuxml/vuln/2026.xml
@@ -4,7 +4,7 @@
       <package>
         <name>apache-commons-httpclient</name>
         <name>jakarta-commons-httpclient</name>
-        <range><le>3.1</le></range>
+        <range><ge>3.1</ge></range>
       </package>
       <package>
         <name>httpclient</name>
@@ -36,7 +36,7 @@
       <package>
         <name>apache-commons-httpclient</name>
         <name>jakarta-commons-httpclient</name>
-        <range><eq>3.1</eq></range>
+        <range><ge>3.1</ge></range>
       </package>
     </affects>
     <description>