[Bug 280627] security/vuxml - incorrect line in commit d87a0c incorrectly marks current mysql80-server as vulnerable
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 05 Aug 2024 12:08:18 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280627 Bug ID: 280627 Summary: security/vuxml - incorrect line in commit d87a0c incorrectly marks current mysql80-server as vulnerable Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Many People Priority: --- Component: Individual Port(s) Assignee: ports-secteam@FreeBSD.org Reporter: robbak@gmail.com Assignee: ports-secteam@FreeBSD.org Flags: maintainer-feedback?(ports-secteam@FreeBSD.org) Created attachment 252513 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=252513&action=edit Patch to fix 2024.xml There is a mistake in commit f073a58b1ff96a86b1a4385745f094e4cd87a0ca that marks all versions of mysql80-server, past, current and future, as vulnerable. It also means that vulnerable versions of mysql81-server are not marked. The entry that should be mysql81-server was mistakenly typed as mysql80-server, leading to the latest mysql80-server marked as vulnerable, as it will never have a version number of 8.1.1. It also means that there are multiple entries for mysql80-server, which could break some tools. The attached patch should be applied to fix this error. -- You are receiving this mail because: You are the assignee for the bug.