aboutsummaryrefslogtreecommitdiff
path: root/documentation/content/en/books/porters-handbook/security
diff options
context:
space:
mode:
authorSergio Carlavilla Delgado <carlavilla@FreeBSD.org>2021-03-31 21:13:10 +0000
committerSergio Carlavilla Delgado <carlavilla@FreeBSD.org>2021-03-31 21:13:10 +0000
commitf8fed61b80beb7ce384fdc0c36887ee44f10eb7c (patch)
tree7ad880dc6ef380be7113f3663564102dd407834a /documentation/content/en/books/porters-handbook/security
parent284030c301b967a9cbb51a83aff397cf00c80f1d (diff)
Diffstat (limited to 'documentation/content/en/books/porters-handbook/security')
-rw-r--r--documentation/content/en/books/porters-handbook/security/_index.adoc (renamed from documentation/content/en/books/porters-handbook/security/chapter.adoc)4
1 files changed, 2 insertions, 2 deletions
diff --git a/documentation/content/en/books/porters-handbook/security/chapter.adoc b/documentation/content/en/books/porters-handbook/security/_index.adoc
index 18069eaa7e..d2919d9774 100644
--- a/documentation/content/en/books/porters-handbook/security/chapter.adoc
+++ b/documentation/content/en/books/porters-handbook/security/_index.adoc
@@ -41,14 +41,14 @@ A security vulnerability is all different. First, it may remain unnoticed for ye
[[security-fix]]
== Fixing Security Vulnerabilities
-While on the subject of ports and packages, a security vulnerability may initially appear in the original distribution or in the port files. In the former case, the original software developer is likely to release a patch or a new version instantly. Update the port promptly with respect to the author's fix. If the fix is delayed for some reason, either <<dads-noinstall,mark the port as `FORBIDDEN`>> or introduce a patch file to the port. In the case of a vulnerable port, just fix the port as soon as possible. In either case, follow <<port-upgrading,the standard procedure for submitting changes>> unless having rights to commit it directly to the ports tree.
+While on the subject of ports and packages, a security vulnerability may initially appear in the original distribution or in the port files. In the former case, the original software developer is likely to release a patch or a new version instantly. Update the port promptly with respect to the author's fix. If the fix is delayed for some reason, either crossref:porting-dads[dads-noinstall,mark the port as `FORBIDDEN`] or introduce a patch file to the port. In the case of a vulnerable port, just fix the port as soon as possible. In either case, follow crossref:port-upgrading[port-upgrading,the standard procedure for submitting changes] unless having rights to commit it directly to the ports tree.
[IMPORTANT]
====
Being a ports committer is not enough to commit to an arbitrary port. Remember that ports usually have maintainers, must be respected.
====
-Please make sure that the port's revision is bumped as soon as the vulnerability has been closed. That is how the users who upgrade installed packages on a regular basis will see they need to run an update. Besides, a new package will be built and distributed over FTP and WWW mirrors, replacing the vulnerable one. Bump `PORTREVISION` unless `DISTVERSION` has changed in the course of correcting the vulnerability. That is, bump `PORTREVISION` if adding a patch file to the port, but do not bump it if updating the port to the latest software version and thus already touched `DISTVERSION`. Please refer to the <<makefile-naming-revepoch,corresponding section>> for more information.
+Please make sure that the port's revision is bumped as soon as the vulnerability has been closed. That is how the users who upgrade installed packages on a regular basis will see they need to run an update. Besides, a new package will be built and distributed over FTP and WWW mirrors, replacing the vulnerable one. Bump `PORTREVISION` unless `DISTVERSION` has changed in the course of correcting the vulnerability. That is, bump `PORTREVISION` if adding a patch file to the port, but do not bump it if updating the port to the latest software version and thus already touched `DISTVERSION`. Please refer to the crossref:makefiles[makefile-naming-revepoch,corresponding section] for more information.
[[security-notify]]
== Keeping the Community Informed