git: 1c2a42c43ecb - main - security/vuxml: reference FreeBSD-SA-24:13.openssl

Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: Philip Paeps <philip_at_FreeBSD.org>
Date: Thu, 05 Sep 2024 06:55:14 UTC

The branch main has been updated by philip:

URL: https://cgit.FreeBSD.org/ports/commit/?id=1c2a42c43ecbef4213e3a65dd67c117cc35e1542

commit 1c2a42c43ecbef4213e3a65dd67c117cc35e1542
Author:     Philip Paeps <philip@FreeBSD.org>
AuthorDate: 2024-09-05 06:46:55 +0000
Commit:     Philip Paeps <philip@FreeBSD.org>
CommitDate: 2024-09-05 06:54:04 +0000

    security/vuxml: reference FreeBSD-SA-24:13.openssl
    
    Add a reference to FreeBSD-SA-24:13.openssl (issued 2024-09-04) to the
    vuxml entry for OpenSSL CVE-2024-6119.
    
    FreeBSD-SA-24:13.openssl affects FreeBSD 14.x
---
 security/vuxml/vuln/2024.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml
index ed0f4fa2025f..cfd544457a48 100644
--- a/security/vuxml/vuln/2024.xml
+++ b/security/vuxml/vuln/2024.xml
@@ -229,6 +229,11 @@
 	<name>openssl31-quictls</name>
 	<range><lt>3.1.7</lt></range>
       </package>
+      <package>
+	<name>FreeBSD</name>
+	<range><ge>14.1</ge><lt>14.1_4</lt></range>
+	<range><ge>14.0</ge><lt>14.0_10</lt></range>
+      </package>
     </affects>
     <description>
 	<body xmlns="http://www.w3.org/1999/xhtml">
@@ -251,10 +256,12 @@
       <cvename>CVE-2024-6119</cvename>
       <url>https://openssl-library.org/news/secadv/20240627.txt</url>
       <url>https://openssl-library.org/news/secadv/20240903.txt</url>
+      <freebsdsa>SA-24:13.openssl</freebsdsa>
     </references>
     <dates>
       <discovery>2024-09-03</discovery>
       <entry>2024-09-03</entry>
+      <modified>2024-09-05</modified>
     </dates>
   </vuln>