Page MenuHomeFreeBSD

VuXML entry for gitlab
ClosedPublic

Authored by mfechner on Mar 27 2018, 4:51 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Feb 24, 9:30 PM
Unknown Object (File)
Sun, Feb 23, 6:08 PM
Unknown Object (File)
Fri, Feb 21, 11:23 AM
Unknown Object (File)
Sun, Feb 9, 2:18 PM
Unknown Object (File)
Tue, Feb 4, 4:23 AM
Unknown Object (File)
Jan 9 2025, 3:46 AM
Unknown Object (File)
Dec 30 2024, 2:35 AM
Unknown Object (File)
Dec 22 2024, 3:00 AM
Subscribers

Details

Summary

Entry was created as described in security/vuxml vuln.xml.
As it is my first commit into this file, could you please review it carefully?

I hope it is ok that I added ports-secteam to reviews.

Commit message:
Document gitlab vulnerability

Test Plan

Following command where executed:
make validate
make VID=dc0c201c-31da-11e8-ac53-d8cb8abf62dd html

Tests where done to make sure to match correct version like:
pkg audit -f ./vuln.xml gitlab-10.4.4

Diff Detail

Repository
rP FreeBSD ports repository
Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

tz requested changes to this revision.Mar 28 2018, 8:16 AM
tz added inline comments.
security/vuxml/vuln.xml
82

Please add an block:
<cvename>CVE-2018-8801</cvename>

This revision now requires changes to proceed.Mar 28 2018, 8:16 AM
tz added a subscriber: remko.

Approved after the requested change

security/vuxml/vuln.xml
76

The Review Tool lost my second comment: Please convert this one single line into multiple lines with an maximum length of 80 chars. Otherwise @remko will ask you to perform this change ;)

It makes the reading in various editors much easier while it does not change anything else in the process.

This revision is now accepted and ready to land.Mar 28 2018, 12:48 PM

Thanks, I will commit it with the requested change, even if make validate now complains with:
... see above
Consider using /usr/home/idefix/svn/ports/security/vuxml/vuln.xml.unexpanded for final commit

which wants everything in one line...

In D14870#312892, @idefix_fechner.net wrote:

Thanks, I will commit it with the requested change, even if make validate now complains with:
... see above
Consider using /usr/home/idefix/svn/ports/security/vuxml/vuln.xml.unexpanded for final commit

which wants everything in one line...

This isn't right. It should work with multiple lines just fine. Mh.