svn commit: r472379 - head/security/vuxml

[Bernard Spil]

Author: brnrd
Date: Thu Jun 14 13:24:18 2018
New Revision: 472379
URL: https://svnweb.freebsd.org/changeset/ports/472379

Log:
  security/vuxml: Document LibreSSL vuln

Modified:
  head/security/vuxml/vuln.xml

Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml	Thu Jun 14 13:12:46 2018	(r472378)
+++ head/security/vuxml/vuln.xml	Thu Jun 14 13:24:18 2018	(r472379)
@@ -78,16 +78,26 @@ Notes:
       <cvename>CVE-2018-0495</cvename>
       <url>https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/</url>
       <url>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0495</url>
+      <url>https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.7.4-relnotes.txt</url>
     </references>
     <dates>
       <discovery>2018-06-13</discovery>
       <entry>2018-06-13</entry>
+      <modified>2018-06-14</modified>
     </dates>
   </vuln>
 
   <vuln vid="c82ecac5-6e3f-11e8-8777-b499baebfeaf">
     <topic>OpenSSL -- Client DoS due to large DH parameter</topic>
     <affects>
+      <package>
+	<name>libressl</name>
+	<range><lt>2.7.4</lt></range>
+      </package>
+      <package>
+	<name>libressl-devel</name>
+	<range><lt>2.7.4</lt></range>
+      </package>
       <package>
 	<name>openssl</name>
 	<range><lt>1.0.2o_4,1</lt></range>