git: e15f422dd6a8 - main - security/vuxml: Document cyrus-imapd vulnerability.

[Rene Ladan]

On Thu, Sep 02, 2021 at 07:25:22AM +0900, Hajimu UMEMOTO wrote:
> Hi,
> 
> On Thu, 02 Sep 2021 14:38:31 +0900, Rene Ladan wrote:
> 
> > Specifying a package in the <package> tag without a <range> child does not pass 'make validate' :
> > 
> > /usr/ports/security/vuxml/vuln-flat.xml:194: element package: validity error : Element package content does not follow the DTD, expecting (name+ , range+), got (name name name )
> >       </package>
> >                 ^
> 
> All versions of the packages are affected.
> Is it correct just adding '<dange></range>' ?
No, <range><gt>0</gt></range> would be the correct incantation.

Regards,
René