svn commit: r301625 - in head: devel/bugzilla devel/bugzilla3 devel/bugzilla42 security/vuxml

[Simon L. B. Nielsen]

On 27 Jul 2012, at 22:34, Olli Hauer wrote:

> Author: ohauer
> Date: Fri Jul 27 21:34:04 2012
> New Revision: 301625
> URL: http://svn.freebsd.org/changeset/ports/301625
> 
> Log:
>  - security update bugzilla
>    new Versions: 3.6.10, 4.0.7, 4.2.2
...
> Modified: head/security/vuxml/vuln.xml
> ==============================================================================
> --- head/security/vuxml/vuln.xml	Fri Jul 27 17:06:03 2012	(r301624)
> +++ head/security/vuxml/vuln.xml	Fri Jul 27 21:34:04 2012	(r301625)
> @@ -52,6 +52,57 @@ Note:  Please add new entries to the beg
> 
> -->
> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
> +  <vuln vid="58253655-d82c-11e1-907c-20cf30e32f6d">
> +    <topic>bugzilla -- multiple vulnerabilities</topic>
> +    <affects>
> +      <package>
> +	<range><ge>3.6.0</ge><lt>3.6.10</lt></range>
> +	<range><ge>4.0.0</ge><lt>4.0.7</lt></range>
> +	<range><ge>4.2.0</ge><lt>4.2.2</lt></range>
> +      </package>

You are missing the package names so the file isn't valid:

[simon at freefall:~/vuxml] make validate
/bin/sh /dumpster/home/simon/vuxml/files/tidy.sh "/dumpster/home/simon/vuxml/files/tidy.xsl" "/dumpster/home/simon/vuxml/vuln.xml" > "/dumpster/home/simon/vuxml/vuln.xml.tidy"
>>> Validating...
/usr/local/bin/xmllint --valid --noout /dumpster/home/simon/vuxml/vuln.xml
/dumpster/home/simon/vuxml/vuln.xml:62: element package: validity error : Element package content does not follow the DTD, expecting (name+ , range+), got (range range range )
      </package>
                ^
>>> FAILED.
*** Error code 1

Stop in /dumpster/home/simon/vuxml.

It's probably just a matter of adding "<name>bugzilla</name>", but I'm not set up to be able to commit to ports easily right now so I haven't tried.

-- 
Simon L. B. Nielsen