git: 9601584a5ac7 - main - security/vuxml: Correct roundcube entry

From: Fernando Apesteguía <fernape_at_FreeBSD.org>
Date: Thu, 05 Jun 2025 16:01:37 UTC
The branch main has been updated by fernape:

URL: https://cgit.FreeBSD.org/ports/commit/?id=9601584a5ac74fc289663f36d23b43a3a2944e13

commit 9601584a5ac74fc289663f36d23b43a3a2944e13
Author:     Fernando Apesteguía <fernape@FreeBSD.org>
AuthorDate: 2025-06-05 16:00:03 +0000
Commit:     Fernando Apesteguía <fernape@FreeBSD.org>
CommitDate: 2025-06-05 16:00:03 +0000

    security/vuxml: Correct roundcube entry
    
    Flavored ports should include all package names in the VuXML entry.
    
    PR:             287306
    Reported by:    Tomáš Čiernik <tomas@ciernik.sk>
---
 security/vuxml/vuln/2025.xml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index d1b34188725b..fe8e16ec0c7f 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -195,7 +195,19 @@
     <topic>Post-Auth Remote Code Execution found in Roundcube Webmail</topic>
     <affects>
       <package>
-	<name>roundcube</name>
+	<name>roundcube-php81</name>
+	<range><lt>1.6.11</lt></range>
+      </package>
+      <package>
+	<name>roundcube-php82</name>
+	<range><lt>1.6.11</lt></range>
+      </package>
+      <package>
+	<name>roundcube-php83</name>
+	<range><lt>1.6.11</lt></range>
+      </package>
+      <package>
+	<name>roundcube-php84</name>
 	<range><lt>1.6.11</lt></range>
       </package>
     </affects>