git: 74de9d47efa3 - main - security/vuxml: Register multiple www/squid vulnerabilities

From: Fernando Apesteguía <fernape_at_FreeBSD.org>
Date: Wed, 25 Oct 2023 08:22:17 UTC 
The branch main has been updated by fernape:

URL: https://cgit.FreeBSD.org/ports/commit/?id=74de9d47efa3d18466fdf05a9c52b7fcf8c121d3

commit 74de9d47efa3d18466fdf05a9c52b7fcf8c121d3
Author:     Fernando Apesteguía <fernape@FreeBSD.org>
AuthorDate: 2023-10-25 08:14:20 +0000
Commit:     Fernando Apesteguía <fernape@FreeBSD.org>
CommitDate: 2023-10-25 08:21:59 +0000

    security/vuxml: Register multiple www/squid vulnerabilities
    
    Denial of Service in FTP
            Base Score:     8.6
            Vector:         CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
    
    Request/Response smuggling in HTTP/1.1 and ICAP
            Base Score:     9.3
            Vector:         CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
    
    Denial of Service in HTTP Digest Authentication
            Base Score: 9.9
            Vector:         CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
---
 security/vuxml/vuln/2023.xml | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)

diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml
index 67a8f8319be8..e96fe67d3702 100644
--- a/security/vuxml/vuln/2023.xml
+++ b/security/vuxml/vuln/2023.xml
@@ -1,3 +1,34 @@
+  <vuln vid="a8fb8e3a-730d-11ee-ab61-b42e991fc52e">
+    <topic>squid -- Multiple vulnerabilities</topic>
+    <affects>
+      <package>
+	<name>squid</name>
+	<range><lt>6.4</lt></range>
+      </package>
+    </affects>
+    <description>
+	<body xmlns="http://www.w3.org/1999/xhtml">
+	<p>The squid-cache project reports:</p>
+	<blockquote cite="https://github.com/squid-cache/squid/security/advisories?page=1">
+	  <ul>
+	    <li>Denial of Service in FTP</li>
+	    <li>Request/Response smuggling in HTTP/1.1 and ICAP</li>
+	    <li>Denial of Service in HTTP Digest Authentication</li>
+	  </ul>
+	</blockquote>
+	</body>
+    </description>
+    <references>
+      <url>https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w</url>
+      <url>https://github.com/squid-cache/squid/security/advisories/GHSA-j83v-w3p4-5cqh</url>
+      <url>https://github.com/squid-cache/squid/security/advisories/GHSA-phqj-m8gv-cq4g</url>
+    </references>
+    <dates>
+      <discovery>2023-10-21</discovery>
+      <entry>2023-10-25</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="4a4712ae-7299-11ee-85eb-84a93843eb75">
     <topic>OpenSSL -- potential loss of confidentiality</topic>
     <affects>