[Bug 203227] vuln.xml incorrectly flagging ruby20 as insecure

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203227

--- Comment #2 from Mathieu Arnold <mat at FreeBSD.org> ---
(In reply to Mark Felder from comment #1)
> /usr/ports/lang/ruby20 # make -V PKGNAME
> ruby20-2.0.0.647,1
> /usr/ports/lang/ruby21 # make -V PKGNAME
> ruby-2.1.7,1
> /usr/ports/lang/ruby22 # make -V PKGNAME
> ruby22-2.2.3,1
> 
> 
> If you're using ruby 2.0, the package name is "ruby20". You've indicated
> your intstalled package name is "ruby-2.0.0.647,1" but this is not correct
> and explains why it's being marked as vulnerable. Your installed pacakge
> should be ruby20-2.0.0.647,1. 

If he's using DEFAULT_VERSIONS=ruby=20 or something, his ruby 2.0 port will be
called ruby and not ruby20, a bit like the Perl ports do.

-- 
You are receiving this mail because:
You are on the CC list for the bug.