svn commit: r419644 - head/security/vuxml

Mark Felder feld at FreeBSD.org
Thu Aug 4 18:19:02 UTC 2016


Author: feld
Date: Thu Aug  4 18:19:00 2016
New Revision: 419644
URL: https://svnweb.freebsd.org/changeset/ports/419644

Log:
  Fix vuxml entry for recent perl vulnerabilities to correctly match package names
  
  PR:		211561

Modified:
  head/security/vuxml/vuln.xml

Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml	Thu Aug  4 18:14:31 2016	(r419643)
+++ head/security/vuxml/vuln.xml	Thu Aug  4 18:19:00 2016	(r419644)
@@ -66,18 +66,15 @@ Notes:
 	<range><lt>0.22</lt></range>
       </package>
       <package>
-	<name>perl5.18</name>
-	<name>perl5.20</name>
-	<name>perl5-devel</name>
-	<range><ge>0</ge></range>
-      </package>
-      <package>
-	<name>perl5.22</name>
-	<range><lt>5.22.3</lt></range>
+	<name>perl5</name>
+	<range><ge>5.18</ge><lt>5.18.99</lt></range>
+	<range><ge>5.20</ge><lt>5.20.99</lt></range>
+	<range><ge>5.22</ge><lt>5.22.3</lt></range>
+	<range><ge>5.24</ge><lt>5.24.1</lt></range>
       </package>
       <package>
-	<name>perl5.24</name>
-	<range><lt>5.24.1</lt></range>
+	<name>perl5-devel</name>
+	<range><ge>0</ge></range>
       </package>
     </affects>
     <description>
@@ -96,6 +93,7 @@ Notes:
     <dates>
       <discovery>2016-06-30</discovery>
       <entry>2016-08-04</entry>
+      <modified>2016-08-04</modified>
     </dates>
   </vuln>
 
@@ -103,18 +101,15 @@ Notes:
     <topic>perl -- local arbitrary code execution</topic>
     <affects>
       <package>
-	<name>perl5.18</name>
-	<name>perl5.20</name>
-	<name>perl5-devel</name>
-	<range><ge>0</ge></range>
-      </package>
-      <package>
-	<name>perl5.22</name>
-	<range><lt>5.22.3</lt></range>
+	<name>perl5</name>
+	<range><ge>5.18</ge><lt>5.18.99</lt></range>
+	<range><ge>5.20</ge><lt>5.20.99</lt></range>
+	<range><ge>5.22</ge><lt>5.22.3</lt></range>
+	<range><ge>5.24</ge><lt>5.24.1</lt></range>
       </package>
       <package>
-	<name>perl5.24</name>
-	<range><lt>5.24.1</lt></range>
+	<name>perl5-devel</name>
+	<range><ge>0</ge></range>
       </package>
     </affects>
     <description>
@@ -135,6 +130,7 @@ Notes:
     <dates>
       <discovery>2016-07-21</discovery>
       <entry>2016-08-04</entry>
+      <modified>2016-08-04</modified>
     </dates>
   </vuln>
 


More information about the svn-ports-all mailing list