On 30 April 2012 19:15, Xin Li <delp...@delphij.net> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > On 04/30/12 11:08, Chris Rees wrote: >> On 30 April 2012 17:51, Xin LI <delp...@freebsd.org> wrote: >>> delphij 2012-04-30 17:51:46 UTC >>> >>> FreeBSD ports repository >>> >>> Modified files: security/vuxml vuln.xml Log: Document samba >>> incorrect permission checks vulnerability. >> >> + <range><gt>3.4.*</gt><lt>3.4.17</lt></range> + </package> + >> <package> + <name>samba35</name> + >> <range><gt>3.5.*</gt><lt>3.5.15</lt></range> + </package> + >> <package> + <name>samba36</name> + >> <range><gt>3.6.*</gt><lt>3.6.5</lt></range> >> >> Don't you want to use <ge /> for the minimum versions in each >> range? > > That's a good question, frankly I'm not sure... > > I used gt here because * means -NaN to me (and there is no >= -NaN but > only > -NaN), plus, older entries do this, too. It would probably a > good idea to use <ge>3.6.0<ge> instead, though. >
Good point. We're better off sticking with the former though-- <ge>3.6.0</ge> misses out 3.6.a etc of course. Chris _______________________________________________ cvs-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/cvs-all To unsubscribe, send any mail to "cvs-all-unsubscr...@freebsd.org"
