diff options
| author | Chris Moerz <freebsd@ny-central.org> | 2024-03-16 15:13:05 +0000 |
|---|---|---|
| committer | Joseph Mingrone <jrm@FreeBSD.org> | 2024-03-16 15:19:11 +0000 |
| commit | 21d7bdfba4497c62b000a8434c30c1a9d56dc780 (patch) | |
| tree | 90613fe9022b2265eaa545a77eee08a2687cd168 | |
| parent | 5913163958d93117b40724d68a9ed6c364601b9b (diff) | |
| download | doc-21d7bdfba4497c62b000a8434c30c1a9d56dc780.tar.gz doc-21d7bdfba4497c62b000a8434c30c1a9d56dc780.zip | |
Porter's Handbook/Security: Update VuXML content
- Use a valid MITRE CVE instead of outdated CAN
- Remove obsolete MITRE CVE ids, security focus bug id, US Cert id, and
US Cert Security alert
- Update URLs for US Cert vulnerability note and Technical Cyber
Security Alert
PR: 277068
Reviewed by: jrm
Differential Revision: https://reviews.freebsd.org/D43992
| -rw-r--r-- | documentation/content/en/books/porters-handbook/security/_index.adoc | 16 |
1 files changed, 3 insertions, 13 deletions
diff --git a/documentation/content/en/books/porters-handbook/security/_index.adoc b/documentation/content/en/books/porters-handbook/security/_index.adoc index 7843b770d7..3c3c77b0b0 100644 --- a/documentation/content/en/books/porters-handbook/security/_index.adoc +++ b/documentation/content/en/books/porters-handbook/security/_index.adoc @@ -168,12 +168,8 @@ Now consider a realistic VuXML entry: <references> <.> <freebsdsa>SA-10:75.foo</freebsdsa> <.> <freebsdpr>ports/987654</freebsdpr> <.> - <cvename>CAN-2010-0201</cvename> <.> - <cvename>CAN-2010-0466</cvename> - <bid>96298</bid> <.> - <certsa>CA-2010-99</certsa> <.> + <cvename>CVE-2023-48795</cvename> <.> <certvu>740169</certvu> <.> - <uscertsa>SA10-99A</uscertsa> <.> <uscertta>SA10-99A</uscertta> <.> <mlist msgid="201075606@hacker.com">http://marc.theaimsgroup.com/?l=bugtraq&m=203886607825605</mlist> <.> <url>http://j.r.hacker.com/advisories/1</url> <.> @@ -213,15 +209,9 @@ The above example specifies that affected are versions `1.6` and up to but not i <.> This is a https://cve.mitre.org/[MITRE CVE] identifier. -<.> This is a https://www.securityfocus.com/bid/[SecurityFocus Bug ID]. +<.> This is a https://www.kb.cert.org/vuls/[US-CERT] vulnerability note. -<.> This is a https://www.cert.org/[US-CERT] security advisory. - -<.> This is a https://www.cert.org/[US-CERT] vulnerability note. - -<.> This is a https://www.cert.org/[US-CERT] Cyber Security Alert. - -<.> This is a https://www.cert.org/[US-CERT] Technical Cyber Security Alert. +<.> This is a https://www.cisa.gov/news-events/cybersecurity-advisories[US-CERT] Technical Cyber Security Alert. <.> This is a URL to an archived posting in a mailing list. The attribute `msgid` is optional and may specify the message ID of the posting. |