On 18 May 2015 at 20:26, Mark Felder <f...@freebsd.org> wrote:
> I was just thinking it might be nice when you're committing a change to
> a port to fix a CVE if there was a tag you can drop in the commit log to
> tell ports-security if there is a need for an entry to vuln.xml. At
> least those without experience editing vuln.xml can more easily have
> someone else assist them with getting it added.

Ah, yes, that applies to those with those shiny commit bits. I'm on
the other side. It certainly needs to be added to the workflow of
updating/maintaining ports somehow.
There's the problem of
Maintaining the vuxml entries
Flagging security issues resolved in updates
Flagging unaddressed security updates


Sevan / Venture37
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscr...@freebsd.org"

Reply via email to