From nobody Sat Sep 07 05:16:01 2024 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4X11XZ4G8Hz5WnkM; Sat, 07 Sep 2024 05:16:14 +0000 (UTC) (envelope-from bsdkaffee@gmail.com) Received: from mail-ua1-f50.google.com (mail-ua1-f50.google.com [209.85.222.50]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4X11XZ2NVFz58T3; Sat, 7 Sep 2024 05:16:14 +0000 (UTC) (envelope-from bsdkaffee@gmail.com) Authentication-Results: mx1.freebsd.org; none Received: by mail-ua1-f50.google.com with SMTP id a1e0cc1a2514c-846d1ba933eso590499241.2; Fri, 06 Sep 2024 22:16:14 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1725686173; x=1726290973; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=Y7CJLmPqGpEuLt2F5vW8wbgYI7r5XZbucU+POqRgPGc=; b=pBed5dVhKZL/nN/LYW6vmQJVXQXpjL1L1ZNlaldWTDsbmsy+iSsEMd6KGHyXPJqv3k m+2xA61M7YRFY6YFrU6HGKv8YuiPMXm6zrDlvtTeQ8q0c/l3r3z9tbFp5LdwaeDIzVSr JglCdJ6D5vmnN/HKiBOzoDhPxb51TQ/VrWhLYX4pzcFVQVPx0hIXq2KnQ+RQFXGUzch/ vol7JJ20WWOmK0HrM7WnFHFaRL69NvBdayux/jqb9RHkADG3o9LhiSIVOoSWZ7mt7p0A kpLxkXbhU3OUWF5dOqKfmaXOuIxB4/dYMJgk8PmzQ5Qg62+Dov+F7fFceLp2S/fIlK1V MoKw== X-Forwarded-Encrypted: i=1; AJvYcCUH0rlMxDwJfBihe9AoINcIcZAfd9rPdfNL3wI5NtrCxayzoFGK5r38NMdSUqOcDJOe87EeOBUNvjmJX/XAVBooycjpYmyqzQ==@freebsd.org, AJvYcCUojTpMAzgaxd74LXRu/XTKHaMRre4HoR3CH7O521HPW8HK3eNP3tBXlAXUt5vAaEkNFgUEmbPPaVgVIICsrI5bSpmuahM=@freebsd.org X-Gm-Message-State: AOJu0YyRXAgTGKJ6B1KDyWxbR4cp3MbzaeKTCvceCTwQJuTYfkSUAlAX zSww+/MjBwvhjGJf4y/P4nP33VmBKWpsuydgvvqL5BJSJWibTcGG9iBCTsTl5tt9xtBTQ921ZOy Yx3jlng4sEGQ4lfSK8AAnOdVakfXcfw== X-Google-Smtp-Source: AGHT+IHn8Cblk0RIaOA/HUTbbAeuzg0fMC19Okc3QqsduXyvZD2i+Nd4gcLeN/yU+55ssHNpYZRU+92X9H23f7vkM88= X-Received: by 2002:a05:6102:6c7:b0:48f:e7f2:b14 with SMTP id ada2fe7eead31-49bde25b03amr4382413137.26.1725686172710; Fri, 06 Sep 2024 22:16:12 -0700 (PDT) List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-main@freebsd.org Sender: owner-dev-commits-ports-main@FreeBSD.org MIME-Version: 1.0 References: <202409061452.486EqKOL032322@gitrepo.freebsd.org> In-Reply-To: <202409061452.486EqKOL032322@gitrepo.freebsd.org> From: "Jason E. Hale" Date: Sat, 7 Sep 2024 01:16:01 -0400 Message-ID: Subject: Re: git: 05d4a95e7f58 - main - security/vuxml: Add devel/binutils < 2.43 To: Cy Schubert Cc: ports-committers@freebsd.org, dev-commits-ports-all@freebsd.org, dev-commits-ports-main@freebsd.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:15169, ipnet:209.85.128.0/17, country:US] X-Rspamd-Queue-Id: 4X11XZ2NVFz58T3 On Fri, Sep 6, 2024 at 10:52=E2=80=AFAM Cy Schubert wrote: > > The branch main has been updated by cy: > > URL: https://cgit.FreeBSD.org/ports/commit/?id=3D05d4a95e7f58d75a6a2cf732= 1751c50ee5d42568 > > commit 05d4a95e7f58d75a6a2cf7321751c50ee5d42568 > Author: Cy Schubert > AuthorDate: 2024-09-06 14:51:48 +0000 > Commit: Cy Schubert > CommitDate: 2024-09-06 14:52:09 +0000 > > security/vuxml: Add devel/binutils < 2.43 > --- > security/vuxml/vuln/2024.xml | 32 ++++++++++++++++++++++++++++++++ > 1 file changed, 32 insertions(+) > > diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml > index f4f89e3aaea7..613a37f8dfa3 100644 > --- a/security/vuxml/vuln/2024.xml > +++ b/security/vuxml/vuln/2024.xml > @@ -1,3 +1,35 @@ > + > + -- > + > + > + binutils > + 2.43 > + > + > + > + > +

alster@vinterdalen.se reports PR/281070:

> +
> +

A new version of devel/binutils has been released fixing > + CVE-2023-1972, CVE-2023-25585, CVE-2023-25586, and > + CVE-2023-25588. > +

> +
> + > + > + > + https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D281070 > + CVE-2023-1972 > + CVE-2023-25585 > + CVE-2023-25586 > + CVE-2023-25588 > + > + > + 2024-08-25 > + 2024-09-06 > + > + > + > > gitea -- multiple issues > In addition to what bapt said, is not filled out and the "INSERT URL HERE" should be addressed in
. - Jason