Re: ports/114906: update net/asterisk to 1.4.9

[Matthew Seaman-2]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Phillip N. wrote:

> The motivation of the update is this:
> http://ftp.digium.com/pub/asa/ASA-2007-018.pdf
> "Exhaustion vulnerability in IAX2 channel driver"
>
> the vulxml contains two thing i cannot figure out.
> These are:
> - vid (how is the id generated?)

   <vid> is the VuXML ID -- it's a unique tag per entry that can be
used in eg. URLs.  See uuidgen(1) for how to generate one.

> - bid (what is it?)

   <bid> stands for 'Bugtraq ID' -- it's the reference number used
on this site to identify the issue:

    http://www.securityfocus.com/

There are a number of other security related web sites that the
VuXML markup caters for, as well as arbitrary URLs.  None of them
are compulsory to have in a <references> section, but all relevant
references should be provided.

See Jaques Vidrine's presentation for more info -- at

    http://www.vuxml.org/files/VuXML_BSDCan.pdf

        Cheers,

        Matthew

- --
Dr Matthew J Seaman MA, D.Phil.                   7 Priory Courtyard
                                                  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey     Ramsgate
                                                  Kent, CT11 9PW
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGqF7S8Mjk52CukIwRCGSXAKCLdPGQYx+iCFrs+KfJzGE+PI7/6gCdHKDR
Zia7H/D3lnaiDr2D3BbGvUM=
=7EqW
-----END PGP SIGNATURE-----
_______________________________________________
freebsd-vuxml@... mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-vuxml
To unsubscribe, send any mail to "freebsd-vuxml-unsubscribe@..."