Date: Fri, 14 Jul 2023 07:05:36 GMT From: Hiroki Tagato <tagattie@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: c556b8a8d5e6 - main - security/vuxml: document electron22 multiple vulnerabilities Message-ID: <202307140705.36E75aUC066659@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by tagattie: URL: https://cgit.FreeBSD.org/ports/commit/?id=c556b8a8d5e63d0aa4421979a12508677618df6a commit c556b8a8d5e63d0aa4421979a12508677618df6a Author: Hiroki Tagato <tagattie@FreeBSD.org> AuthorDate: 2023-07-14 07:02:49 +0000 Commit: Hiroki Tagato <tagattie@FreeBSD.org> CommitDate: 2023-07-14 07:05:30 +0000 security/vuxml: document electron22 multiple vulnerabilities Obtained from: https://github.com/electron/electron/releases/tag/v22.3.17 --- security/vuxml/vuln/2023.xml | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml index c11d44506b66..01fe1392e4ca 100644 --- a/security/vuxml/vuln/2023.xml +++ b/security/vuxml/vuln/2023.xml @@ -1,3 +1,38 @@ + <vuln vid="3446e45d-a51b-486f-9b0e-e4402d91fed6"> + <topic>electron22 -- multiple vulnerabilities</topic> + <affects> + <package> + <name>electron22</name> + <range><lt>22.3.17</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Electron developers report:</p> + <blockquote cite="https://github.com/electron/electron/releases/tag/v22.3.17">; + <p>This update fixes the following vulnerabilities:</p> + <ul> + <li>Security: backported fix for CVE-2023-3422.</li> + <li>Security: backported fix for CVE-2023-3421.</li> + <li>Security: backported fix for CVE-2023-3420.</li> + </ul> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2023-3422</cvename> + <url>https://github.com/advisories/GHSA-gqjh-f545-vcx3</url>; + <cvename>CVE-2023-3421</cvename> + <url>https://github.com/advisories/GHSA-943x-93ff-jr62</url>; + <cvename>CVE-2023-3420</cvename> + <url>https://github.com/advisories/GHSA-4297-fx5c-x987</url>; + </references> + <dates> + <discovery>2023-07-12</discovery> + <entry>2023-07-14</entry> + </dates> + </vuln> + <vuln vid="b67d768c-1f53-11ee-82ed-4ccc6adda413"> <topic>librecad -- out-of-bounds read in importshp plugin</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202307140705.36E75aUC066659>