Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 270079 - GLSA dtd: ambiguous description between product and affected-element
Summary: GLSA dtd: ambiguous description between product and affected-element
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: GLSA Errors (show other bugs)
Hardware: All Linux
: High minor (vote)
Assignee: Gentoo Security
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-05-16 16:17 UTC by alexander.seith
Modified: 2017-01-13 14:39 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description alexander.seith 2009-05-16 16:17:00 UTC
It seems like the description in the comments of the GLSA DTD between the product and the affected-element do not match:

[snip]
<!-- 
    Element:      product
    Description:  Defines what type of security announcement this is.
    
                  Valid types are:
                  - ebuild         A Portage-provided ebuild has a security 
                                   issue
                  - informational  This GLSA is purely informational, no Gentoo
                                   system is affected
                  - infrastructure The security issue involves the Gentoo 
                                   infrastructure
    
                  The text contains one keyword that defines the issue.
     
    Example: <product type="ebuild">openssl</product>
    Example: <product type="infrastructure">rsync mirror</product>
-->
<!ELEMENT product   (#PCDATA)>
<!ATTLIST product   type    (ebuild|infrastructure|informational) #REQUIRED>

[snip]

<!--
    Element:      affected
    Description:  Describe what the affected subjects are.
    
                  If product@type = 'build', the child elements are 'package'
                  If product@type = 'portage', the child elements are 'package'
                  If product@type = 'infrastructure', the child elements are 
                  'service'
-->
[snip]

In the former description it is said that the product type can be either "ebuild", "informational" or "infrastructure". However, in the latter description, types are "build" (missing "e"?), "portage" and "infrastructure".

Regards

Alex

Reproducible: Always
Comment 1 Alex Legler (RETIRED) archtester gentoo-dev Security 2017-01-13 14:39:57 UTC
Fixed now, allow a few minutes to propagate.