git: 294624132e65 - main - security/vuxml: reference FreeBSD SA-24:03.unbound

From: Philip Paeps <philip_at_FreeBSD.org>
Date: Mon, 01 Apr 2024 05:44:56 UTC 
The branch main has been updated by philip:

URL: https://cgit.FreeBSD.org/ports/commit/?id=294624132e657ef99b49d47f94479856f80f5ecf

commit 294624132e657ef99b49d47f94479856f80f5ecf
Author:     Philip Paeps <philip@FreeBSD.org>
AuthorDate: 2024-04-01 05:41:07 +0000
Commit:     Philip Paeps <philip@FreeBSD.org>
CommitDate: 2024-04-01 05:44:41 +0000

    security/vuxml: reference FreeBSD SA-24:03.unbound
    
    Add a reference to FreeBSD SA-24:03.unbound (announced 2024-03-28) to
    the vuxml entry for Unbound CVE-2023-50387 and CVE-2023-50868.
    
    Unbound was updated to 1.19.1 in FreeBSD 14.0-RELEASE-p6 and in FreeBSD
    13.2-RELEASE-p11.  FreeBSD 13.3 was not affected (Unbound 1.19.1 was
    included in the release).
---
 security/vuxml/vuln/2024.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml
index 677698b4ddf1..79abef442bfc 100644
--- a/security/vuxml/vuln/2024.xml
+++ b/security/vuxml/vuln/2024.xml
@@ -1510,6 +1510,11 @@
 	<name>unbound</name>
 	<range><lt>1.19.1</lt></range>
       </package>
+      <package>
+	<name>FreeBSD</name>
+	<range><ge>14.0</ge><lt>14.0_6</lt></range>
+	<range><ge>13.2</ge><lt>13.2_11</lt></range>
+      </package>
     </affects>
     <description>
 	<body xmlns="http://www.w3.org/1999/xhtml">
@@ -1546,10 +1551,12 @@
       <url>https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html</url>
       <url>https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released</url>
       <url>https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/</url>
+      <freebsdsa>SA-24:03.unbound</freebsdsa>
     </references>
     <dates>
       <discovery>2024-02-06</discovery>
       <entry>2024-02-13</entry>
+      <modified>2024-04-01</modified>
     </dates>
   </vuln>