aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMatthias Andree <mandree@FreeBSD.org>2023-04-28 14:20:47 +0000
committerMatthias Andree <mandree@FreeBSD.org>2023-04-28 14:20:47 +0000
commit5f57c067b60fc17e8b848a8e698c60a92dc765ac (patch)
tree05e2e452093f4480485c45a514e4a66cfa9763e4
parent6ff53aa124d487f75e4bcdc2267f15acdc72f523 (diff)
downloadports-5f57c067b60fc17e8b848a8e698c60a92dc765ac.tar.gz
ports-5f57c067b60fc17e8b848a8e698c60a92dc765ac.zip
security/vuxml: Update ghostscript CVE-2023-28879 entry
and mark ghostscript9-agpl-base 9.56.1_10 as fixed, and remove ghostscript9-agpl-x11 which does not seem to be using the vulnerable code. Security: 25872b25-da2d-11ed-b715-a1e76793953b Security: CVE-2023-28879 PR: 270823
-rw-r--r--security/vuxml/vuln/2023.xml5
1 files changed, 2 insertions, 3 deletions
diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml
index 22cd64fddd51..39275525bce1 100644
--- a/security/vuxml/vuln/2023.xml
+++ b/security/vuxml/vuln/2023.xml
@@ -436,8 +436,7 @@
<package><name>ghostscript7-x11</name><range><lt>10.01.1</lt></range></package>
<package><name>ghostscript8-base</name><range><lt>10.01.1</lt></range></package>
<package><name>ghostscript8-x11</name><range><lt>10.01.1</lt></range></package>
- <package><name>ghostscript9-agpl-base</name><range><lt>10.01.1</lt></range></package>
- <package><name>ghostscript9-agpl-x11</name><range><lt>10.01.1</lt></range></package>
+ <package><name>ghostscript9-agpl-base</name><range><lt>9.56.1_10</lt></range></package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
@@ -460,7 +459,7 @@
<dates>
<discovery>2023-03-23</discovery>
<entry>2023-04-13</entry>
- <modified>2023-04-23</modified>
+ <modified>2023-04-28</modified>
</dates>
</vuln>