aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorKoichiro Iwao <meta@FreeBSD.org>2026-08-05 02:32:34 +0000
committerKoichiro Iwao <meta@FreeBSD.org>2026-08-05 02:48:08 +0000
commit941a70f2042b46f1e5d2d599887100e57f9baff9 (patch)
tree12d2d3253f6aee590ebefd4d765ef930b0f64f38
parentb748a0aa3595729c2424ab69c972a9ee52a87630 (diff)
security/vuxml: Fix affected port version of mail/thunderbird by CVE-2026-6778
Although mail/thunderbird does not actually have PORTEPOCH, one is included in vuxml. As a result, even fixed versions were still incorrectly reported as vulnerable. The incorrect report was as follows: ===> thunderbird-153.0.2 has known vulnerabilities: thunderbird-153.0.2 is vulnerable: Mozilla -- Invalid pointer CVE: CVE-2026-6778 WWW: https://vuxml.FreeBSD.org/freebsd/5124ce36-430a-11f1-a627-b42e991fc52e.html
-rw-r--r--security/vuxml/vuln/2026.xml2
1 files changed, 1 insertions, 1 deletions
diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml
index 2387bbdffc59..56e4eb1c290a 100644
--- a/security/vuxml/vuln/2026.xml
+++ b/security/vuxml/vuln/2026.xml
@@ -11656,7 +11656,7 @@ affected.</p>
</package>
<package>
<name>thunderbird</name>
- <range><lt>150.0.0,2</lt></range>
+ <range><lt>150.0.0</lt></range>
</package>
</affects>
<description>