Bug 220874

Summary: security/vuxml: Fix incorrect strongSwan entries
Product: Ports & Packages Reporter: Dani I. <i.dani>
Component: Individual Port(s)Assignee: Mark Felder <feld>
Status: Closed FIXED    
Severity: Affects Some People CC: duchateau.olivier, feld, franco, olivier, ports-secteam
Priority: --- Keywords: patch
Version: LatestFlags: bugzilla: maintainer-feedback? (ports-secteam)
Hardware: Any   
OS: Any   
See Also: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220823
Attachments:
Description Flags
[patch] Fix incorrect strongSwan entries
none
[patch] Fix incorrect strongSwan entries
none
[patch] Fix incorrect strongSwan entries
none
[patch] Fix incorrect strongSwan entries i.dani: maintainer-approval?

Description Dani I. 2017-07-20 06:01:42 UTC
Created attachment 184525 [details]
[patch] Fix incorrect strongSwan entries

The vuxml-entry for strongSwan (created with bug #220823) is false.

- Both vuln's can be listed in one entry, doesn't need two
- Range for one vuln is false -> all CVE's are fixed with 5.5.3

Thanks for fixing. (see patch attached)
Comment 1 Dani I. 2017-07-20 06:06:44 UTC
Created attachment 184526 [details]
[patch] Fix incorrect strongSwan entries

Fix spacing.
Comment 2 Dani I. 2017-07-20 06:15:24 UTC
Created attachment 184527 [details]
[patch] Fix incorrect strongSwan entries

... now with correct spacing, etc.. :-)
Comment 3 Dani I. 2017-07-20 06:17:20 UTC
Created attachment 184528 [details]
[patch] Fix incorrect strongSwan entries

... missed to delete the wrong/secondary entry.
Comment 4 Kubilay Kocak freebsd_committer freebsd_triage 2017-07-23 10:33:00 UTC
Assign to committer that resolved bug 220823 (with vuxml commit in ports r446191)
Comment 5 Olivier Duchateau 2017-07-23 11:49:20 UTC
(In reply to Kubilay Kocak from comment #4)

Wrong assignment, it's for Olivier Cochard (olivier@ without final letter d)
Comment 6 Franco Fichtner 2017-07-26 03:50:54 UTC
olivier@ let me know he is away until August 17, please somebody else take this.
Comment 7 Franco Fichtner 2017-08-03 11:46:32 UTC
Still pending.  The intermediate fix would be to simply change "5.5.3" to "5.5.2" to correct the vulnerability report.
Comment 8 Mark Felder freebsd_committer freebsd_triage 2017-08-05 03:37:25 UTC
Thanks guys and sorry it took so long for someone to fix this.
Comment 9 commit-hook freebsd_committer freebsd_triage 2017-08-05 03:37:51 UTC
A commit references this bug:

Author: feld
Date: Sat Aug  5 03:37:00 UTC 2017
New revision: 447388
URL: https://svnweb.freebsd.org/changeset/ports/447388

Log:
  Fix Strongswan entries

  PR:		220874

Changes:
  head/security/vuxml/vuln.xml
Comment 10 Franco Fichtner 2017-08-05 08:05:46 UTC
Thank you, Mark!