svn commit: r538232 - head/security/vuxml

[Kyle Evans]

On Mon, Jun 8, 2020 at 11:26 AM Jochen Neumeister <joneum at freebsd.org> wrote:
>
> Author: joneum
> Date: Mon Jun  8 16:26:09 2020
> New Revision: 538232
> URL: https://svnweb.freebsd.org/changeset/ports/538232
>
> Log:
>   Unbreak vuxmlbuild
>
>   Parsing VuXML ...Application exception:
>   bad CVE name for vid 669f3fe8-a07a-11ea-b83e-f0def1f5c5a2: GHSL-2020-100 @ho:215
>   *** Error code 1
>
>   Sponsored by: Netzkommune GmbH
>
> Modified:
>   head/security/vuxml/vuln.xml
>
> Modified: head/security/vuxml/vuln.xml
> ==============================================================================
> --- head/security/vuxml/vuln.xml        Mon Jun  8 16:24:14 2020        (r538231)
> +++ head/security/vuxml/vuln.xml        Mon Jun  8 16:26:09 2020        (r538232)
> @@ -87,9 +87,6 @@ Notes:
>        <cvename>CVE-2020-11019</cvename>
>        <cvename>CVE-2020-11017</cvename>
>        <cvename>CVE-2020-11018</cvename>
> -      <cvename>GHSL-2020-100</cvename>
> -      <cvename>GHSL-2020-101</cvename>
> -      <cvename>GHSL-2020-102</cvename>
>        </references>
>      <dates>
>        <discovery>2020-04-10</discovery>

Upstream apparently later obtained CVE IDs for these, as such:

- GHSL-2020-100 => CVE-2020-13396
- GHSL-2020-101 => CVE-2020-13397
- GHSL-2020-102 => CVE-2020-13398

I will add these back in to keep it accurate when I get a chance.

Thanks,

Kyle Evans