git: e653ffd354b4 - main - security/vuxml: more cleanup
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Sat, 31 Oct 2026 15:16:58 UTC
The branch main has been updated by joneum:
URL: https://cgit.FreeBSD.org/ports/commit/?id=e653ffd354b4fef6cf1a24674bc4bc46c5334a82
commit e653ffd354b4fef6cf1a24674bc4bc46c5334a82
Author: Jochen Neumeister <joneum@FreeBSD.org>
AuthorDate: 2026-10-31 15:14:43 +0000
Commit: Jochen Neumeister <joneum@FreeBSD.org>
CommitDate: 2026-10-31 15:16:46 +0000
security/vuxml: more cleanup
Remove duplicate cvename and url entries, and add the missing PORTEPOCH
to three ranges so pkg audit matches the affected packages at all.
Sponsored by: Netzkommune GmbH
---
security/vuxml/vuln/2007.xml | 3 ---
security/vuxml/vuln/2011.xml | 1 -
security/vuxml/vuln/2013.xml | 3 ---
security/vuxml/vuln/2016.xml | 1 -
security/vuxml/vuln/2017.xml | 13 -------------
security/vuxml/vuln/2018.xml | 5 -----
security/vuxml/vuln/2020.xml | 1 -
security/vuxml/vuln/2021.xml | 1 -
security/vuxml/vuln/2022.xml | 1 -
security/vuxml/vuln/2023.xml | 4 ----
security/vuxml/vuln/2024.xml | 11 -----------
security/vuxml/vuln/2025.xml | 4 ----
security/vuxml/vuln/2026.xml | 6 +++---
13 files changed, 3 insertions(+), 51 deletions(-)
diff --git a/security/vuxml/vuln/2007.xml b/security/vuxml/vuln/2007.xml
index cfac8ca9cf37..3490cba7a2ce 100644
--- a/security/vuxml/vuln/2007.xml
+++ b/security/vuxml/vuln/2007.xml
@@ -1608,9 +1608,6 @@
<url>http://drupal.org/node/184354</url>
<url>http://drupal.org/node/184320</url>
<url>http://secunia.com/advisories/27292</url>
- <url>http://secunia.com/advisories/27292</url>
- <url>http://secunia.com/advisories/27292</url>
- <url>http://secunia.com/advisories/27290</url>
<url>http://secunia.com/advisories/27290</url>
</references>
<dates>
diff --git a/security/vuxml/vuln/2011.xml b/security/vuxml/vuln/2011.xml
index 16165676d325..7f1f316f4dbb 100644
--- a/security/vuxml/vuln/2011.xml
+++ b/security/vuxml/vuln/2011.xml
@@ -2246,7 +2246,6 @@
<cvename>CVE-2011-2993</cvename>
<cvename>CVE-2011-2988</cvename>
<cvename>CVE-2011-2987</cvename>
- <cvename>CVE-2011-0084</cvename>
<cvename>CVE-2011-2990</cvename>
<cvename>CVE-2011-2986</cvename>
</references>
diff --git a/security/vuxml/vuln/2013.xml b/security/vuxml/vuln/2013.xml
index f46442c6e179..7df37d3eef21 100644
--- a/security/vuxml/vuln/2013.xml
+++ b/security/vuxml/vuln/2013.xml
@@ -4747,7 +4747,6 @@ affected..</p>
<url>https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-05-02</url>
<cvename>CVE-2013-2034</cvename>
<cvename>CVE-2013-2033</cvename>
- <cvename>CVE-2013-2034</cvename>
<cvename>CVE-2013-1808</cvename>
</references>
<dates>
@@ -5144,7 +5143,6 @@ affected..</p>
<references>
<cvename>CVE-2013-1854</cvename>
<cvename>CVE-2013-1856</cvename>
- <cvename>CVE-2013-1856</cvename>
<cvename>CVE-2013-1857</cvename>
<url>http://weblog.rubyonrails.org/2013/3/18/SEC-ANN-Rails-3-2-13-3-1-12-and-2-3-18-have-been-released/</url>
<url>https://groups.google.com/forum/#!topic/ruby-security-ann/o0Dsdk2WrQ0</url>
@@ -7220,7 +7218,6 @@ affected..</p>
<cvename>CVE-2012-5627</cvename>
<url>https://mariadb.atlassian.net/browse/MDEV-4029</url>
<url>https://mariadb.atlassian.net/browse/MDEV-MDEV-729</url>
- <url>https://mariadb.atlassian.net/browse/MDEV-MDEV-729</url>
<url>http://www.mysqlperformanceblog.com/2013/01/23/announcing-percona-server-5-5-29-29-4/</url>
</references>
<dates>
diff --git a/security/vuxml/vuln/2016.xml b/security/vuxml/vuln/2016.xml
index fa140e4b87f9..cc44b99e2811 100644
--- a/security/vuxml/vuln/2016.xml
+++ b/security/vuxml/vuln/2016.xml
@@ -11441,7 +11441,6 @@ and CVE-2013-0155.</p>
<cvename>CVE-2016-1673</cvename>
<cvename>CVE-2016-1674</cvename>
<cvename>CVE-2016-1675</cvename>
- <cvename>CVE-2016-1672</cvename>
<cvename>CVE-2016-1677</cvename>
<cvename>CVE-2016-1678</cvename>
<cvename>CVE-2016-1679</cvename>
diff --git a/security/vuxml/vuln/2017.xml b/security/vuxml/vuln/2017.xml
index 687dedbad2a4..840042cacd92 100644
--- a/security/vuxml/vuln/2017.xml
+++ b/security/vuxml/vuln/2017.xml
@@ -657,11 +657,8 @@
<url>https://bugzilla.gnome.org/show_bug.cgi?id=775200</url>
<url>http://www.openwall.com/lists/oss-security/2017/05/15/1</url>
<url>http://www.securityfocus.com/bid/98599</url>
- <url>http://www.openwall.com/lists/oss-security/2017/05/15/1</url>
<url>http://www.securityfocus.com/bid/98556</url>
- <url>http://www.openwall.com/lists/oss-security/2017/05/15/1</url>
<url>http://www.securityfocus.com/bid/98601</url>
- <url>http://www.openwall.com/lists/oss-security/2017/05/15/1</url>
<url>http://www.securityfocus.com/bid/98568</url>
<cvename>CVE-2017-8872</cvename>
<cvename>CVE-2017-9047</cvename>
@@ -2949,7 +2946,6 @@
<url>https://cgit.freedesktop.org/xorg/xserver/commit/?id=8caed4df36b1f802b4992edcfd282cbeeec35d9d</url>
<url>https://cgit.freedesktop.org/xorg/xserver/commit/?id=ba336b24052122b136486961c82deac76bbde455</url>
<url>http://www.securityfocus.com/bid/99543</url>
- <url>https://bugzilla.suse.com/show_bug.cgi?id=1035283</url>
<url>https://cgit.freedesktop.org/xorg/xserver/commit/?id=05442de962d3dc624f79fc1a00eca3ffc5489ced</url>
<cvename>CVE-2017-10971</cvename>
<cvename>CVE-2017-10972</cvename>
@@ -3050,9 +3046,6 @@
</body>
</description>
<references>
- <url>http://www.securityfocus.com/bid/100290</url>
- <url>https://security.gentoo.org/glsa/201709-18</url>
- <url>https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.3_.2F_4.3.1_.282017-08-10.29</url>
<url>http://www.securityfocus.com/bid/100290</url>
<url>https://security.gentoo.org/glsa/201709-18</url>
<url>https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.3_.2F_4.3.1_.282017-08-10.29</url>
@@ -4127,9 +4120,7 @@
<references>
<url>https://blog.ripstech.com/2017/sugarcrm-security-diet-multiple-vulnerabilities/</url>
<url>https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2017-006/</url>
- <url>https://blog.ripstech.com/2017/sugarcrm-security-diet-multiple-vulnerabilities/</url>
<url>https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2017-007/</url>
- <url>https://blog.ripstech.com/2017/sugarcrm-security-diet-multiple-vulnerabilities/</url>
<url>https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2017-008/</url>
<cvename>CVE-2017-14508</cvename>
<cvename>CVE-2017-14509</cvename>
@@ -6799,7 +6790,6 @@
<cvename>CVE-2017-9226</cvename>
<cvename>CVE-2017-9227</cvename>
<cvename>CVE-2017-9228</cvename>
- <cvename>CVE-2017-9228</cvename>
</references>
<dates>
<discovery>2017-07-06</discovery>
@@ -8932,7 +8922,6 @@ maliciously crafted GET request to the Horde server.</p>
<url>https://github.com/erikd/libsndfile/commit/60b234301adf</url>
<url>https://github.com/erikd/libsndfile/commit/708e996c87c5</url>
<url>https://github.com/erikd/libsndfile/commit/f457b7b5ecfe</url>
- <url>https://github.com/erikd/libsndfile/commit/60b234301adf</url>
</references>
<dates>
<discovery>2017-04-07</discovery>
@@ -10850,8 +10839,6 @@ maliciously crafted GET request to the Horde server.</p>
<url>https://www.ffmpeg.org/security.html</url>
<url>https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html</url>
<cvename>CVE-2017-5025</cvename>
- <url>https://www.ffmpeg.org/security.html</url>
- <url>https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html</url>
</references>
<dates>
<discovery>2017-01-25</discovery>
diff --git a/security/vuxml/vuln/2018.xml b/security/vuxml/vuln/2018.xml
index 7a4a67f88de2..a4710613de73 100644
--- a/security/vuxml/vuln/2018.xml
+++ b/security/vuxml/vuln/2018.xml
@@ -8639,7 +8639,6 @@ ed by aCaB.</li>
<cvename>CVE-2017-7090</cvename>
<cvename>CVE-2017-7091</cvename>
<cvename>CVE-2017-7092</cvename>
- <cvename>CVE-2017-7092</cvename>
<cvename>CVE-2017-7093</cvename>
<cvename>CVE-2017-7095</cvename>
<cvename>CVE-2017-7096</cvename>
@@ -9634,8 +9633,6 @@ ed by aCaB.</li>
<cvename>CVE-2017-11225</cvename>
<cvename>CVE-2018-6060</cvename>
<cvename>CVE-2018-6061</cvename>
- <cvename>CVE-2018-6060</cvename>
- <cvename>CVE-2018-6061</cvename>
<cvename>CVE-2018-6062</cvename>
<cvename>CVE-2018-6057</cvename>
<cvename>CVE-2018-6063</cvename>
@@ -9910,12 +9907,10 @@ ed by aCaB.</li>
<cvename>CVE-2017-8363</cvename>
<url>https://blogs.gentoo.org/ago/2017/04/29/libsndfile-heap-based-buffer-overflow-in-flac_buffer_copy-flac-c/</url>
<url>https://github.com/erikd/libsndfile/issues/233</url>
- <url>https://github.com/erikd/libsndfile/commit/fd0484aba8e51d16af1e3a880f9b8b857b385eb3</url>
<url>https://github.com/erikd/libsndfile/commit/cd7da8dbf6ee4310d21d9e44b385d6797160d9e8</url>
<cvename>CVE-2017-8365</cvename>
<url>https://blogs.gentoo.org/ago/2017/04/29/libsndfile-global-buffer-overflow-in-i2les_array-pcm-c/</url>
<url>https://github.com/erikd/libsndfile/issues/230</url>
- <url>https://github.com/erikd/libsndfile/commit/fd0484aba8e51d16af1e3a880f9b8b857b385eb3</url>
<cvename>CVE-2017-12562</cvename>
<url>https://github.com/erikd/libsndfile/issues/292/</url>
<url>https://github.com/erikd/libsndfile/commit/cf7a8182c2642c50f1cf90dddea9ce96a8bad2e8</url>
diff --git a/security/vuxml/vuln/2020.xml b/security/vuxml/vuln/2020.xml
index ceeecb1e4e59..26db835d8c04 100644
--- a/security/vuxml/vuln/2020.xml
+++ b/security/vuxml/vuln/2020.xml
@@ -879,7 +879,6 @@
<references>
<url>https://github.com/glpi-project/glpi/security/advisories/GHSA-7xwm-4vjr-jvqh</url>
<url>https://github.com/glpi-project/glpi/commit/f1ae6c8481e5c19a6f1801a5548cada45702e01a#diff-b5d0ee8c97c7abd7e3fa29b9a27d1780</url>
- <url>https://github.com/glpi-project/glpi/commit/f1ae6c8481e5c19a6f1801a5548cada45702e01a#diff-b5d0ee8c97c7abd7e3fa29b9a27d1780</url>
<cvename>CVE-2020-11031</cvename>
</references>
<dates>
diff --git a/security/vuxml/vuln/2021.xml b/security/vuxml/vuln/2021.xml
index eb9926acbf04..f4a8c8f501b6 100644
--- a/security/vuxml/vuln/2021.xml
+++ b/security/vuxml/vuln/2021.xml
@@ -267,7 +267,6 @@
<references>
<cvename>CVE-2021-2322</cvename>
<url>https://www.oracle.com/security-alerts/oracle-open-source-cves-outside-other-oracle-public-documents.html</url>
- <url>https://www.oracle.com/security-alerts/oracle-open-source-cves-outside-other-oracle-public-documents.html</url>
<url>https://github.com/oracle/opengrok/pull/3528</url>
</references>
<dates>
diff --git a/security/vuxml/vuln/2022.xml b/security/vuxml/vuln/2022.xml
index c1455c778370..2739e9e0a076 100644
--- a/security/vuxml/vuln/2022.xml
+++ b/security/vuxml/vuln/2022.xml
@@ -6774,7 +6774,6 @@
<url>https://www.oracle.com/security-alerts/cpuapr2022.html</url>
<cvename>CVE-2022-0778</cvename>
<cvename>CVE-2021-22570</cvename>
- <cvename>CVE-2022-0778</cvename>
<cvename>CVE-2022-21454</cvename>
<cvename>CVE-2022-21482</cvename>
<cvename>CVE-2022-21483</cvename>
diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml
index 43550f11993a..db5f1bd7001d 100644
--- a/security/vuxml/vuln/2023.xml
+++ b/security/vuxml/vuln/2023.xml
@@ -2918,7 +2918,6 @@ Reported by Niccolo Belli and WIPocket (Github #400, #417).
</body>
</description>
<references>
- <cvename>CVE-2023-5207</cvename>
<cvename>CVE-2023-5207</cvename>
<cvename>CVE-2023-4379</cvename>
<cvename>CVE-2023-3413</cvename>
@@ -5426,8 +5425,6 @@ Reported by Niccolo Belli and WIPocket (Github #400, #417).
<references>
<cvename>CVE-2022-4899</cvename>
<cvename>CVE-2023-0361</cvename>
- <cvename>CVE-2022-4899</cvename>
- <cvename>CVE-2022-4899</cvename>
<cvename>CVE-2023-22053</cvename>
<cvename>CVE-2023-22008</cvename>
<cvename>CVE-2023-22046</cvename>
@@ -13964,7 +13961,6 @@ Reported by Niccolo Belli and WIPocket (Github #400, #417).
<references>
<cvename>CVE-2022-32221</cvename>
<cvename>CVE-2022-24407</cvename>
- <cvename>CVE-2022-24407</cvename>
<cvename>CVE-2022-3171</cvename>
<cvename>CVE-2022-1941</cvename>
<cvename>CVE-2023-21868</cvename>
diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml
index f452245b2656..5f6499436d35 100644
--- a/security/vuxml/vuln/2024.xml
+++ b/security/vuxml/vuln/2024.xml
@@ -466,13 +466,6 @@
</description>
<references>
<url>https://codeberg.org/forgejo/forgejo/pulls/5974</url>
- <url>https://codeberg.org/forgejo/forgejo/pulls/5974</url>
- <url>https://codeberg.org/forgejo/forgejo/pulls/5974</url>
- <url>https://codeberg.org/forgejo/forgejo/pulls/5974</url>
- <url>https://codeberg.org/forgejo/forgejo/pulls/5974</url>
- <url>https://codeberg.org/forgejo/forgejo/pulls/5974</url>
- <url>https://codeberg.org/forgejo/forgejo/pulls/5974</url>
- <url>https://codeberg.org/forgejo/forgejo/pulls/5974</url>
</references>
<dates>
<discovery>2024-12-12</discovery>
@@ -664,7 +657,6 @@
<cvename>CVE-2024-8650</cvename>
<cvename>CVE-2024-9367</cvename>
<cvename>CVE-2024-12292</cvename>
- <cvename>CVE-2024-12292</cvename>
<cvename>CVE-2024-10043</cvename>
<url>https://about.gitlab.com/releases/2024/12/11/patch-release-gitlab-17-6-2-released/</url>
</references>
@@ -1050,11 +1042,8 @@
<cvename>CVE-2024-47775</cvename>
<url>https://gstreamer.freedesktop.org/security/sa-2024-0027.html</url>
<cvename>CVE-2024-47776</cvename>
- <url>https://gstreamer.freedesktop.org/security/sa-2024-0027.html</url>
<cvename>CVE-2024-47777</cvename>
- <url>https://gstreamer.freedesktop.org/security/sa-2024-0027.html</url>
<cvename>CVE-2024-47778</cvename>
- <url>https://gstreamer.freedesktop.org/security/sa-2024-0027.html</url>
<cvename>CVE-2024-47835</cvename>
<url>https://gstreamer.freedesktop.org/security/sa-2024-0028.html</url>
<cvename>CVE-2024-47834</cvename>
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index 9d232f4bcf44..2475ba52467b 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -1239,7 +1239,6 @@
<cvename>CVE-2025-13638</cvename>
<cvename>CVE-2025-13639</cvename>
<cvename>CVE-2025-13640</cvename>
- <cvename>CVE-2025-13634</cvename>
<cvename>CVE-2025-13720</cvename>
<cvename>CVE-2025-13721</cvename>
<url>https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html</url>
@@ -1321,8 +1320,6 @@ This issue has been patched in version 2.25.2.</p>
<url>https://cveawg.mitre.org/api/cve/CVE-2018-15859</url>
<cvename>CVE-2018-15861</cvename>
<url>https://cveawg.mitre.org/api/cve/CVE-2018-15861</url>
- <cvename>CVE-2018-15863</cvename>
- <url>https://cveawg.mitre.org/api/cve/CVE-2018-15863</url>
</references>
<dates>
<discovery>2025-12-03</discovery>
@@ -8048,7 +8045,6 @@ This issue has been patched in version 2.25.2.</p>
<cvename>CVE-2025-6170</cvename>
<cvename>CVE-2025-49794</cvename>
<cvename>CVE-2025-49795</cvename>
- <cvename>CVE-2025-49795</cvename>
<url>https://www.openwall.com/lists/oss-security/2025/06/16/6</url>
<url>https://gitlab.gnome.org/Teams/Releng/security/-/wikis/2025#libxml2-and-libxslt</url>
<url>https://gitlab.gnome.org/GNOME/libxml2/-/issues/913</url>
diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml
index 2db1c7a7cae7..6cd616b4d8c9 100644
--- a/security/vuxml/vuln/2026.xml
+++ b/security/vuxml/vuln/2026.xml
@@ -1509,7 +1509,7 @@
<affects>
<package>
<name>p5-MIME-Tools</name>
-<range><lt>5.522</lt></range>
+<range><lt>5.522,2</lt></range>
</package>
</affects>
<description>
@@ -3709,7 +3709,7 @@ record.</li>
<affects>
<package>
<name>libXi</name>
-<range><lt>1.8.4</lt></range>
+<range><lt>1.8.4,1</lt></range>
</package>
</affects>
<description>
@@ -3756,7 +3756,7 @@ record.</li>
<affects>
<package>
<name>libX11</name>
-<range><lt>1.8.14</lt></range>
+<range><lt>1.8.14,1</lt></range>
</package>
</affects>
<description>