259531 – www-apps/viewvc-1.0.5 should not be affected by glsa-200803-29

Bug 259531 - www-apps/viewvc-1.0.5 should not be affected by glsa-200803-29

Summary: www-apps/viewvc-1.0.5 should not be affected by glsa-200803-29

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	GLSA Errors (show other bugs)
Hardware:	All Linux

Importance:	High normal (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2009-02-18 22:33 UTC by Robert A.
Modified:	2009-04-01 12:12 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Robert A. 2009-02-18 22:33:52 UTC

sunkist ~ # paludis -r
Current state of the system

* www-apps/viewvc-1.0.5::installed NOT OK
    This package has following security issues:
    GLSA-200803-29: "ViewVC: Multiple vulnerabilities"
        -> /usr/ports/gentoo/metadata/glsa/glsa-200803-29.xml


from metadata/glsa/glsa-200803-29.xml
  <affected>
    <package name="www-apps/viewvc" auto="yes" arch="*">
      <unaffected range="ge">1.05</unaffected>
      <vulnerable range="lt">1.05</vulnerable>
    </package>
  </affected>


obviously the version numbering is wrong (1.05 instead of 1.0.5).

Comment 1 Pierre-Yves Rofes (RETIRED) gentoo-dev

2009-04-01 12:12:54 UTC

Thanks for the report. The glsa XML file has been updated.