git: 1e665dbe14 - main - Porter's Handbook/Security: Update VuXML content
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Sat, 16 Mar 2024 13:38:55 UTC
The branch main has been updated by jrm:
URL: https://cgit.FreeBSD.org/doc/commit/?id=1e665dbe1445e032d333b518788f7ec3d4389bd4
commit 1e665dbe1445e032d333b518788f7ec3d4389bd4
Author: Joseph Mingrone <jrm@FreeBSD.org>
AuthorDate: 2024-03-16 13:26:10 +0000
Commit: Joseph Mingrone <jrm@FreeBSD.org>
CommitDate: 2024-03-16 13:38:24 +0000
Porter's Handbook/Security: Update VuXML content
- Use a valid MITRE CVE instead of outdated CAN
- Remove obsolete MITRE CVE ids, security focus bug id, US Cert id, and US Cert
Security alerts
- Update URLs for US Cert vulnerability note and Technical Cyber
Security Alert
PR: 277068
Reviewed by: jrm
Sponsored by: https://reviews.freebsd.org/D43992
---
.../en/books/porters-handbook/security/_index.adoc | 16 +++-------------
1 file changed, 3 insertions(+), 13 deletions(-)
diff --git a/documentation/content/en/books/porters-handbook/security/_index.adoc b/documentation/content/en/books/porters-handbook/security/_index.adoc
index 7843b770d7..3c3c77b0b0 100644
--- a/documentation/content/en/books/porters-handbook/security/_index.adoc
+++ b/documentation/content/en/books/porters-handbook/security/_index.adoc
@@ -168,12 +168,8 @@ Now consider a realistic VuXML entry:
<references> <.>
<freebsdsa>SA-10:75.foo</freebsdsa> <.>
<freebsdpr>ports/987654</freebsdpr> <.>
- <cvename>CAN-2010-0201</cvename> <.>
- <cvename>CAN-2010-0466</cvename>
- <bid>96298</bid> <.>
- <certsa>CA-2010-99</certsa> <.>
+ <cvename>CVE-2023-48795</cvename> <.>
<certvu>740169</certvu> <.>
- <uscertsa>SA10-99A</uscertsa> <.>
<uscertta>SA10-99A</uscertta> <.>
<mlist msgid="201075606@hacker.com">http://marc.theaimsgroup.com/?l=bugtraq&m=203886607825605</mlist> <.>
<url>http://j.r.hacker.com/advisories/1</url> <.>
@@ -213,15 +209,9 @@ The above example specifies that affected are versions `1.6` and up to but not i
<.> This is a https://cve.mitre.org/[MITRE CVE] identifier.
-<.> This is a https://www.securityfocus.com/bid/[SecurityFocus Bug ID].
+<.> This is a https://www.kb.cert.org/vuls/[US-CERT] vulnerability note.
-<.> This is a https://www.cert.org/[US-CERT] security advisory.
-
-<.> This is a https://www.cert.org/[US-CERT] vulnerability note.
-
-<.> This is a https://www.cert.org/[US-CERT] Cyber Security Alert.
-
-<.> This is a https://www.cert.org/[US-CERT] Technical Cyber Security Alert.
+<.> This is a https://www.cisa.gov/news-events/cybersecurity-advisories[US-CERT] Technical Cyber Security Alert.
<.> This is a URL to an archived posting in a mailing list. The attribute `msgid` is optional and may specify the message ID of the posting.