Bug 243702

Summary: security/vuxml: Add January FreeBSD Security Advisories SA-20:01.libfetch, SA-20:02.ipsec and SA-20:03.thrmisc
Product: Ports & Packages Reporter: Miroslav Lachman <000.fbsd>
Component: Individual Port(s)Assignee: Security Team <secteam>
Status: Closed FIXED    
Severity: Affects Many People CC: philip, ports-secteam
Priority: --- Keywords: needs-qa, security
Version: Latest   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
vuln.xml patch with SAs none

Description Miroslav Lachman 2020-01-29 09:38:20 UTC
Created attachment 211160 [details]
vuln.xml patch with SAs

FreeBSD SA entries

Add new FreeBSD SA entries in to vuln.xml

Port security/base-audit depends on SA entries in vuln.xml. Pleases commit this soon.
Comment 1 Miroslav Lachman 2020-02-13 19:15:58 UTC
2 weeks passed and again - nobody cares.
Comment 2 commit-hook freebsd_committer freebsd_triage 2020-02-14 01:16:21 UTC
A commit references this bug:

Author: philip
Date: Fri Feb 14 01:16:13 UTC 2020
New revision: 526079
URL: https://svnweb.freebsd.org/changeset/ports/526079

Log:
  security/vuxml: Add January FreeBSD SAs

  SA-20:01.libfetch
  SA-20:02.ipsec
  SA-20:03.thrmisc

  PR:		243702
  Submitted by:	Miroslav Lachman <000.fbsd@quip.cz>

Changes:
  head/security/vuxml/vuln.xml
Comment 3 Philip Paeps freebsd_committer freebsd_triage 2020-02-14 01:21:05 UTC
(In reply to Miroslav Lachman from comment #1)

We care.

The security-officer checklist to release security advisories is not perfect.  Work is ongoing to improve this.

Thank you for your submission and for keeping our feet close to the fire.  Apologies for the delay.  Again.
Comment 4 Miroslav Lachman 2020-02-14 09:42:54 UTC
(In reply to Philip Paeps from comment #3)
I know everybody here is volunteer and has just a bit of time for FreeBSD. But  2 weeks to publish information about critical security advisories is a way too much time.
If there is anything I can help with to improve the situation with SO checklist please let me know.

Thank you for committing!