git: d24e76ca7261 - main - security/vuxml: Correct recent postgresql vulnerability

Go to: [ bottom of page ] [ top of archives ] [ this month ]
From: Alan Somers <asomers_at_FreeBSD.org>
Date: Tue, 20 Aug 2024 16:29:41 UTC
The branch main has been updated by asomers:

URL: https://cgit.FreeBSD.org/ports/commit/?id=d24e76ca7261706f265baa2161ee5f8a787ee2ef

commit d24e76ca7261706f265baa2161ee5f8a787ee2ef
Author:     Alan Somers <asomers@FreeBSD.org>
AuthorDate: 2024-08-20 16:12:17 +0000
Commit:     Alan Somers <asomers@FreeBSD.org>
CommitDate: 2024-08-20 16:29:21 +0000

    security/vuxml: Correct recent postgresql vulnerability
    
    Commit 0c9ebc9a5f6feb6859c23e2ea875f9d4f59b3e38 added VID
    48e6d514-5568-11ef-af48-6cc21735f730 for CVE-2024-7348 , but misspelled
    the package names.  Fix the spelling.
    
    Approved by:    lwhsu (ports)
    Sponsored by:   Axcient
---
 security/vuxml/vuln/2024.xml | 42 +++++++++++++++++++++++++++++++++---------
 1 file changed, 33 insertions(+), 9 deletions(-)

diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml
index 182c9cbc4d5f..a63cbbec6d42 100644
--- a/security/vuxml/vuln/2024.xml
+++ b/security/vuxml/vuln/2024.xml
@@ -554,21 +554,45 @@ All of these are related to the CometVisu add-on for openHAB - if you are a user
     <topic>PostgreSQL -- Prevent unauthorized code execution during pg_dump</topic>
     <affects>
       <package>
-	<name>postgresql-client</name>
-	<range><lt>16.4</lt></range>
-	<range><lt>15.8</lt></range>
-	<range><lt>14.13</lt></range>
-	<range><lt>13.16</lt></range>
+	<name>postgresql12-client</name>
 	<range><lt>12.20</lt></range>
       </package>
       <package>
-	<name>postgresql-server</name>
-	<range><lt>16.4</lt></range>
-	<range><lt>15.8</lt></range>
-	<range><lt>14.13</lt></range>
+	<name>postgresql13-client</name>
 	<range><lt>13.16</lt></range>
+      </package>
+      <package>
+	<name>postgresql14-client</name>
+	<range><lt>14.13</lt></range>
+      </package>
+      <package>
+	<name>postgresql15-client</name>
+	<range><lt>15.8</lt></range>
+      </package>
+      <package>
+	<name>postgresql16-client</name>
+	<range><lt>16.4</lt></range>
+      </package>
+      <package>
+	<name>postgresql12-server</name>
 	<range><lt>12.20</lt></range>
       </package>
+      <package>
+	<name>postgresql13-server</name>
+	<range><lt>13.16</lt></range>
+      </package>
+      <package>
+	<name>postgresql14-server</name>
+	<range><lt>14.13</lt></range>
+      </package>
+      <package>
+	<name>postgresql15-server</name>
+	<range><lt>15.8</lt></range>
+      </package>
+      <package>
+	<name>postgresql16-server</name>
+	<range><lt>16.4</lt></range>
+      </package>
     </affects>
     <description>
 	<body xmlns="http://www.w3.org/1999/xhtml">