From owner-svn-ports-all@FreeBSD.ORG  Tue Mar 24 22:15:49 2015
Return-Path: <owner-svn-ports-all@FreeBSD.ORG>
Delivered-To: svn-ports-all@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id B3DEC6A9;
 Tue, 24 Mar 2015 22:15:49 +0000 (UTC)
Received: from svn.freebsd.org (svn.freebsd.org
 [IPv6:2001:1900:2254:2068::e6a:0])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 978DCA1;
 Tue, 24 Mar 2015 22:15:49 +0000 (UTC)
Received: from svn.freebsd.org ([127.0.1.70])
 by svn.freebsd.org (8.14.9/8.14.9) with ESMTP id t2OMFnrr034851;
 Tue, 24 Mar 2015 22:15:49 GMT (envelope-from zi@FreeBSD.org)
Received: (from zi@localhost)
 by svn.freebsd.org (8.14.9/8.14.9/Submit) id t2OMFnWK034850;
 Tue, 24 Mar 2015 22:15:49 GMT (envelope-from zi@FreeBSD.org)
Message-Id: <201503242215.t2OMFnWK034850@svn.freebsd.org>
X-Authentication-Warning: svn.freebsd.org: zi set sender to zi@FreeBSD.org
 using -f
From: Ryan Steinmetz <zi@FreeBSD.org>
Date: Tue, 24 Mar 2015 22:15:49 +0000 (UTC)
To: ports-committers@freebsd.org, svn-ports-all@freebsd.org,
 svn-ports-head@freebsd.org
Subject: svn commit: r382184 - head/security/vuxml
X-SVN-Group: ports-head
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-BeenThere: svn-ports-all@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: SVN commit messages for the ports tree <svn-ports-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/svn-ports-all>,
 <mailto:svn-ports-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-ports-all/>
List-Post: <mailto:svn-ports-all@freebsd.org>
List-Help: <mailto:svn-ports-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-ports-all>,
 <mailto:svn-ports-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Mar 2015 22:15:49 -0000

Author: zi
Date: Tue Mar 24 22:15:48 2015
New Revision: 382184
URL: https://svnweb.freebsd.org/changeset/ports/382184
QAT: https://qat.redports.org/buildarchive/r382184/

Log:
  - Fix vuxml build: bad package names in f6a014cd-d268-11e4-8339-001e679db764
  - Fix blockquote style to match rest

Modified:
  head/security/vuxml/vuln.xml

Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml	Tue Mar 24 21:55:15 2015	(r382183)
+++ head/security/vuxml/vuln.xml	Tue Mar 24 22:15:48 2015	(r382184)
@@ -61,11 +61,11 @@ Notes:
     <topic>GNU binutils -- multiple vulnerabilities</topic>
     <affects>
       <package>
-	<name>devel/cross-binutils</name>
+	<name>cross-binutils</name>
 	<range><lt>2.25</lt></range>
       </package>
       <package>
-	<name>devel/mingw64-binutils</name>
+	<name>mingw64-binutils</name>
 	<range><lt>2.25</lt></range>
       </package>
     </affects>
@@ -74,29 +74,32 @@ Notes:
 	<p>US-CERT/NIST reports:</p>
 	<blockquote cite="https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8501">
 	  <p>The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU
-	  binutils 2.24 and earlier allows remote attackers to cause a
-	  denial of service (out-of-bounds write) and possibly have other
-	  unspecified impact via a crafted NumberOfRvaAndSizes field in the
-	  AOUT header in a PE executable.</p>
+	    binutils 2.24 and earlier allows remote attackers to cause a
+	    denial of service (out-of-bounds write) and possibly have other
+	    unspecified impact via a crafted NumberOfRvaAndSizes field in the
+	    AOUT header in a PE executable.</p>
 	</blockquote>
 	<p>US-CERT/NIST reports:</p>
 	<blockquote cite="https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8502">
 	  <p>Heap-based buffer overflow in the pe_print_edata function in
-	  bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote
-	  attackers to cause a denial of service (crash) and possibly have
-	  other unspecified impact via a truncated export table in a PE
-	  file.</p>
+	    bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote
+	    attackers to cause a denial of service (crash) and possibly have
+	    other unspecified impact via a truncated export table in a PE
+	    file.</p>
 	</blockquote>
 	<p>US-CERT/NIST reports:</p>
 	<blockquote cite="https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8503">
 	  <p>Stack-based buffer overflow in the ihex_scan function in
-	  bfd/ihex.c in GNU binutils 2.24 and earlier allows remote
-	  attackers to cause a denial of service (crash) and possibly have
-	  other unspecified impact via a crafted ihex file.</p>
+	    bfd/ihex.c in GNU binutils 2.24 and earlier allows remote
+	    attackers to cause a denial of service (crash) and possibly have
+	    other unspecified impact via a crafted ihex file.</p>
 	</blockquote>
       </body>
     </description>
     <references>
+      <cvename>CVE-2014-8501</cvename>
+      <cvename>CVE-2014-8502</cvename>
+      <cvename>CVE-2014-8503</cvename>
       <url>https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8501</url>
       <url>https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8502</url>
       <url>https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8503</url>