git: c359dd16769f - main - security/vuxml: fix the version of *-commons-httpclient
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 10 Jul 2026 13:34:30 UTC
The branch main has been updated by ronald:
URL: https://cgit.FreeBSD.org/ports/commit/?id=c359dd16769f8f52b8c63cf3130bc2d2b9bf2630
commit c359dd16769f8f52b8c63cf3130bc2d2b9bf2630
Author: Ronald Klop <ronald@FreeBSD.org>
AuthorDate: 2026-07-10 13:31:43 +0000
Commit: Ronald Klop <ronald@FreeBSD.org>
CommitDate: 2026-07-10 13:34:23 +0000
security/vuxml: fix the version of *-commons-httpclient
I learned that <eq> does not match portrevision, so <ge> works better.
And CVE-2020-13956 only mentions 3.1 and later and not earlier CPE versions.
---
security/vuxml/vuln/2026.xml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml
index 501ad8f39c4c..7de38cab769e 100644
--- a/security/vuxml/vuln/2026.xml
+++ b/security/vuxml/vuln/2026.xml
@@ -4,7 +4,7 @@
<package>
<name>apache-commons-httpclient</name>
<name>jakarta-commons-httpclient</name>
- <range><le>3.1</le></range>
+ <range><ge>3.1</ge></range>
</package>
<package>
<name>httpclient</name>
@@ -36,7 +36,7 @@
<package>
<name>apache-commons-httpclient</name>
<name>jakarta-commons-httpclient</name>
- <range><eq>3.1</eq></range>
+ <range><ge>3.1</ge></range>
</package>
</affects>
<description>