Re: pkg/48953: pkg audit showing erroneous CVE for nginx-1.5.12nb3 installed via pkgin

[Joerg Sonnenberger <joerg%britannica.bec.de@localhost>]

The following reply was made to PR pkg/48953; it has been noted by GNATS.

From: Joerg Sonnenberger <joerg%britannica.bec.de@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: pkg/48953: pkg audit showing erroneous CVE for nginx-1.5.12nb3
 installed via pkgin
Date: Thu, 26 Jun 2014 16:00:29 +0200

 On Thu, Jun 26, 2014 at 02:45:00AM +0000, c.vv%outlook.com@localhost wrote:
 > The CVE indicated applies to nginx versions .7.61 - .8.40 only
 
 While the CVE is somewhat silly, options for specifying the certificate
 chain for the reverse proxy only appeared recently in the development
 version.
 
 Joerg