git: 5fc1c8e1322f - main - security/vuxml: add FreeBSD SA to CVE-2021-3449/50

Wed Apr 7 11:24:42 UTC 2021

The branch main has been updated by philip:

URL: https://cgit.FreeBSD.org/ports/commit/?id=5fc1c8e1322f9a3fddf86ad129697cfb01c864ba

commit 5fc1c8e1322f9a3fddf86ad129697cfb01c864ba
Author:     Philip Paeps <philip at FreeBSD.org>
AuthorDate: 2021-04-07 11:20:52 +0000
Commit:     Philip Paeps <philip at FreeBSD.org>
CommitDate: 2021-04-07 11:24:14 +0000

    security/vuxml: add FreeBSD SA to CVE-2021-3449/50
    
    Note that FreeBSD 12.2 prior to FreeBSD 12.2-RELEASE-p5 was vulnerable
    to CVE-2021-3449 and CVE-2021-3450.  Reference FreeBSD-SA-21:07.openssl.
---
 security/vuxml/vuln.xml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 72a8be1a9d8d..310e7a7b1f6b 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -297,6 +297,10 @@ Notes:
 	<name>openssl</name>
 	<range><lt>1.1.1k,1</lt></range>
       </package>
+      <package>
+	<name>FreeBSD</name>
+	<range><ge>12.2</ge><lt>12.2_5</lt></range>
+      </package>
     </affects>
     <description>
       <body xmlns="http://www.w3.org/1999/xhtml">
@@ -321,10 +325,12 @@ Notes:
       <url>https://www.openssl.org/news/secadv/20210325.txt</url>
       <cvename>CVE-2021-3449</cvename>
       <cvename>CVE-2021-3450</cvename>
+      <freebsdsa>SA-21:07.openssl</freebsdsa>
     </references>
     <dates>
       <discovery>2021-03-25</discovery>
       <entry>2021-03-26</entry>
+      <modified>2021-04-07</modified>
     </dates>
   </vuln>
 
