svn commit: r446192 - head/security/vuxml

[Romain Tartière]

Hello

On Wed, Jul 19, 2017 at 10:13:45AM +0000, Olivier Cochard wrote:
> Log:
>   Document vulnerability in collectd5
>   
> Modified: head/security/vuxml/vuln.xml
> ==============================================================================
> --- head/security/vuxml/vuln.xml	Wed Jul 19 09:43:30 2017	(r446191)
> +++ head/security/vuxml/vuln.xml	Wed Jul 19 10:13:45 2017	(r446192)
> @@ -58,6 +58,33 @@ Notes:
> +    <affects>
> +      <package>
> +	<name>collectd5</name>
> +	<range><eq>5.7.1</eq></range>
> +      </package>
> +    </affects>

This excludes 5.7.1_1, 5.7.1_2 which do not fix the issue.  Quickly
looking at the code on GitHub, I don't think this is a regression in
5.7.1.  Doesn't it makes sense to change the range to:

<range>
  <lt>5.7.2</lt>
</range>

-- 
Romain Tartière <romain at FreeBSD.org>  http://people.FreeBSD.org/~romain/
pgp: 8234 9A78 E7C0 B807 0B59  80FF BA4D 1D95 5112 336F (ID: 0x5112336F)
(plain text =non-HTML= PGP/GPG encrypted/signed e-mail much appreciated)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/svn-ports-all/attachments/20170721/575fcf07/attachment.sig>