diff options
| author | Sergio Carlavilla Delgado <carlavilla@FreeBSD.org> | 2021-03-31 21:13:10 +0000 |
|---|---|---|
| committer | Sergio Carlavilla Delgado <carlavilla@FreeBSD.org> | 2021-03-31 21:13:10 +0000 |
| commit | f8fed61b80beb7ce384fdc0c36887ee44f10eb7c (patch) | |
| tree | 7ad880dc6ef380be7113f3663564102dd407834a /documentation/content/en/books/porters-handbook/security | |
| parent | 284030c301b967a9cbb51a83aff397cf00c80f1d (diff) | |
Diffstat (limited to 'documentation/content/en/books/porters-handbook/security')
| -rw-r--r-- | documentation/content/en/books/porters-handbook/security/_index.adoc (renamed from documentation/content/en/books/porters-handbook/security/chapter.adoc) | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/documentation/content/en/books/porters-handbook/security/chapter.adoc b/documentation/content/en/books/porters-handbook/security/_index.adoc index 18069eaa7e..d2919d9774 100644 --- a/documentation/content/en/books/porters-handbook/security/chapter.adoc +++ b/documentation/content/en/books/porters-handbook/security/_index.adoc @@ -41,14 +41,14 @@ A security vulnerability is all different. First, it may remain unnoticed for ye [[security-fix]] == Fixing Security Vulnerabilities -While on the subject of ports and packages, a security vulnerability may initially appear in the original distribution or in the port files. In the former case, the original software developer is likely to release a patch or a new version instantly. Update the port promptly with respect to the author's fix. If the fix is delayed for some reason, either <<dads-noinstall,mark the port as `FORBIDDEN`>> or introduce a patch file to the port. In the case of a vulnerable port, just fix the port as soon as possible. In either case, follow <<port-upgrading,the standard procedure for submitting changes>> unless having rights to commit it directly to the ports tree. +While on the subject of ports and packages, a security vulnerability may initially appear in the original distribution or in the port files. In the former case, the original software developer is likely to release a patch or a new version instantly. Update the port promptly with respect to the author's fix. If the fix is delayed for some reason, either crossref:porting-dads[dads-noinstall,mark the port as `FORBIDDEN`] or introduce a patch file to the port. In the case of a vulnerable port, just fix the port as soon as possible. In either case, follow crossref:port-upgrading[port-upgrading,the standard procedure for submitting changes] unless having rights to commit it directly to the ports tree. [IMPORTANT] ==== Being a ports committer is not enough to commit to an arbitrary port. Remember that ports usually have maintainers, must be respected. ==== -Please make sure that the port's revision is bumped as soon as the vulnerability has been closed. That is how the users who upgrade installed packages on a regular basis will see they need to run an update. Besides, a new package will be built and distributed over FTP and WWW mirrors, replacing the vulnerable one. Bump `PORTREVISION` unless `DISTVERSION` has changed in the course of correcting the vulnerability. That is, bump `PORTREVISION` if adding a patch file to the port, but do not bump it if updating the port to the latest software version and thus already touched `DISTVERSION`. Please refer to the <<makefile-naming-revepoch,corresponding section>> for more information. +Please make sure that the port's revision is bumped as soon as the vulnerability has been closed. That is how the users who upgrade installed packages on a regular basis will see they need to run an update. Besides, a new package will be built and distributed over FTP and WWW mirrors, replacing the vulnerable one. Bump `PORTREVISION` unless `DISTVERSION` has changed in the course of correcting the vulnerability. That is, bump `PORTREVISION` if adding a patch file to the port, but do not bump it if updating the port to the latest software version and thus already touched `DISTVERSION`. Please refer to the crossref:makefiles[makefile-naming-revepoch,corresponding section] for more information. [[security-notify]] == Keeping the Community Informed |
