openoffice --- document disclosure

[Jacques Vidrine]

Jacques Vidrine wrote:
> NAKATA Maho wrote:
> 
>> In Message-ID: <20040914232905.GD95323 at madman.celabo.org> "Jacques A. 
>> Vidrine" <nectar at FreeBSD.org> wrote:
>>
>> Dear nectar and portmgr:
>>
>> Dear portmgr:
>> o I forgot to bump PORTREVISION
>> o I should change VuXML entry < 1.1.2_1 Please approve!
>> thank you very much!
>>  
>> Dear nectar:
>>
>> Index: Makefile
>> ===================================================================
>> RCS file: /home/pcvs/ports/editors/openoffice-1.1/Makefile,v
>> retrieving revision 1.165
>> diff -u -r1.165 Makefile
>> --- Makefile    14 Sep 2004 22:20:51 -0000      1.165
>> +++ Makefile    15 Sep 2004 02:35:18 -0000
>> @@ -7,6 +7,7 @@
>>  
>>  PORTNAME=      openoffice
>>  PORTVERSION=   1.1.2
>> +PORTREVISION=  1
>>  CATEGORIES+=   editors
>>  MASTER_SITES+=  
>> ${MASTER_SITE_RINGSERVER:S,%SUBDIR%,misc/openoffice/&,} \
>>                 
>> ftp://sunsite.cnlab-switch.ch/mirror/OpenOffice/%SUBDIR%/ \
>>
>> cvs server: Diffing .
>> Index: vuln.xml
>> ===================================================================
>> RCS file: /home/pcvs/ports/security/vuxml/vuln.xml,v
>> retrieving revision 1.218
>> diff -u -r1.218 vuln.xml
>> --- vuln.xml    14 Sep 2004 03:38:59 -0000      1.218
>> +++ vuln.xml    15 Sep 2004 02:36:34 -0000
>> @@ -176,7 +176,7 @@
>>         <name>tr-openoffice</name>
>>         <name>zh-openoffice-CN</name>
>>         <name>zh-openoffice-TW</name>
>> -       <range><ge>0</ge></range>
>> +       <range><ge>1.1.2_1</ge></range>
>>        </package>
>>      </affects>
>>      <description>
>> cvs server: Diffing files
>>
>> is sufficient?
> 
> 
> Yes, I think that will be just fine.  

My mistake, I did not read carefully enough.  The correct thing I 
believe (and what I will commit) is

    <range><lt>1.1.2_1</lt></range>
    <range><ge>2.0</ge></range>

In other words, the affected versions are X < 1.1.2_1 or X >= 2.0.

Cheers,
-- 
Jacques A Vidrine / NTT/Verio
nectar at celabo.org / jvidrine at verio.net / nectar at FreeBSD.org