[Bug 251995] security/vuxml request for version ranges for www/node entries

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Mon Jan 18 09:37:41 UTC 2021


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=251995

--- Comment #3 from Miroslav Lachman <000.fbsd at quip.cz> ---
(In reply to Bradley T. Hughes from comment #1)
It is not just about the node versions it is about the style of version ranges
reported in vuln.xml in general. I think we need to always set both sides: the
minimum and maximum version. Not just "anything lower than". It caused problems
in the past and will cause problems in the future too.
Package of node was just an actual example.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list