From nobody Thu Aug 24 02:01:23 2023 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4RWRC80mtFz4rdtt; Thu, 24 Aug 2023 02:01:24 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4RWRC80Dszz3gll; Thu, 24 Aug 2023 02:01:24 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1692842484; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=9hQLeOqrCVtvxFQtiBnSlUv14ZFtd2DBOT2TLZsjfSM=; b=HpWMQGkcwDOfNbZXTWXRfsuY1aR4Vwdv6iBj+Ch6IEgeuRpv/Og35YtCNw2bGeQ7KM7DtF CBShQz545ATBLAAP0PulCsYLZhKuNuPLBUFpJl3LDrW6oCmqj1RZkt2bpq33TZ3JvXhzrJ YGftQdmUwErZU2rLKLOGwD8ybMy79MMMsp9qHm5wULEhLKsWY9eo5M6ck9bU6/X+JIlyGj 7qtZnqJgogZhEE32gQF9DKZVcudpPMfBMY8jsodrj3/DaLe21DfUgkAacFYW8wbVcNZEX9 Yn3KbuCBI0rdkTYoTXc5CQhl5g0+Q5ohHEER1SDTJvm/aco+L0rfl/ZCtoyupQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1692842484; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=9hQLeOqrCVtvxFQtiBnSlUv14ZFtd2DBOT2TLZsjfSM=; b=J/1FACr73iCFlyKOKmGVfDv/DEQ1NN291tzQfhsIdQsEn3746oNYCEPUnmZdfsgr5H4dOO 5rlxVkgQYrjroXaINTIuhzREvoEf243hoA8g6Mn5y7xahoWaPZMB9L5do3kPyABpStwx1q G4RjxRRZ6e9L9GUkCQshCjB8tA7FfjMhI34J/Y7QJK7mqlqZZkj7z3d9vXSHdYyN/WtHgt sAXHbPFkap+XfHLv22/fm88KS5GT8OfDaOn9VD2XPPCKztyqUmRTGhMxAwSqa97Dph4Q6n Gm+nJzMUiWY0nX+kDxS40cUzO23ZsFHfzBvB/e4gVP1k37WVaWXpIEqVaZE+Ew== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1692842484; a=rsa-sha256; cv=none; b=mM0erScsOpJj2tWwBiUwhKmwL5Gaq6u+MChfuue9rU6oexm4LCzdOVlpj/Jxku9geflleB TPSS1O2IzguuDGP8bQ7Ecyom4b1C7U8gfpC4ffvJU6y79q+MJ37WmKVEjk25cVxKcLqNFo c+akme2cvz31TmBoCewZB8JFa2pkTymcRvsrNp+68UNKCDwSS7KyllFgRzmIaS9PK9hGYe qRyzmhbqhMTCUv2B091PNQxZOXO7hxZcHgxKTw/t2IUsflassdTQ4JmKEph5sg9q0rhf1s i9ZGuE7/KoU+sg/z9KnM59vdppwqBSkCZ01JOvvJfRx3zz5p1UpMWDKOOIrXOw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4RWRC76727z180T; Thu, 24 Aug 2023 02:01:23 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.17.1/8.17.1) with ESMTP id 37O21NvZ065992; Thu, 24 Aug 2023 02:01:23 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.17.1/8.17.1/Submit) id 37O21Na9065967; Thu, 24 Aug 2023 02:01:23 GMT (envelope-from git) Date: Thu, 24 Aug 2023 02:01:23 GMT Message-Id: <202308240201.37O21Na9065967@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Hiroki Tagato Subject: git: 258bf10900d7 - main - security/vuxml: document electron multiple vulnerabilities List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-main@freebsd.org X-BeenThere: dev-commits-ports-main@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: tagattie X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 258bf10900d72b2d524292ac98cbe1545e97237e Auto-Submitted: auto-generated The branch main has been updated by tagattie: URL: https://cgit.FreeBSD.org/ports/commit/?id=258bf10900d72b2d524292ac98cbe1545e97237e commit 258bf10900d72b2d524292ac98cbe1545e97237e Author: Hiroki Tagato AuthorDate: 2023-08-24 01:59:58 +0000 Commit: Hiroki Tagato CommitDate: 2023-08-24 01:59:58 +0000 security/vuxml: document electron multiple vulnerabilities Obtained from: https://github.com/electron/electron/releases/tag/v22.3.22, https://github.com/electron/electron/releases/tag/v24.8.1, https://github.com/electron/electron/releases/tag/v25.7.0 --- security/vuxml/vuln/2023.xml | 105 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 105 insertions(+) diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml index af7074dadc10..a270be853a0d 100644 --- a/security/vuxml/vuln/2023.xml +++ b/security/vuxml/vuln/2023.xml @@ -1,3 +1,108 @@ + + electron25 -- multiple vulnerabilities + + + electron25 + 25.7.0 + + + + +

Electron developers report:

+
+

This update fixes the following vulnerabilities:

+
    +
  • Security: backported fix for CVE-2023-4071.
    • +
  • Security: backported fix for CVE-2023-4070.
    • +
  • Security: backported fix for CVE-2023-4075.
    • +
  • Security: backported fix for CVE-2023-4076.
    • +
  • Security: backported fix for CVE-2023-4074.
    • +
  • Security: backported fix for CVE-2023-4072.
    • +
  • Security: backported fix for CVE-2023-4068.
    • +
  • Security: backported fix for CVE-2023-4073.
    • +
  • Security: backported fix for CVE-2023-4355.
    • +
  • Security: backported fix for CVE-2023-4354.
    • +
  • Security: backported fix for CVE-2023-4353.
    • +
  • Security: backported fix for CVE-2023-4351.
    • +
+
+ + + + CVE-2023-4071 + https://github.com/advisories/GHSA-qc3g-vp59-7vwh + CVE-2023-4070 + https://github.com/advisories/GHSA-9xxv-mx64-rx27 + CVE-2023-4075 + https://github.com/advisories/GHSA-7332-j628-x48x + CVE-2023-4076 + https://github.com/advisories/GHSA-7rfc-cwhj-x2qv + CVE-2023-4074 + https://github.com/advisories/GHSA-6j3m-7hm6-qjrx + CVE-2023-4072 + https://github.com/advisories/GHSA-9j4r-qr47-rcxp + CVE-2023-4068 + https://github.com/advisories/GHSA-wh89-h5f7-hhcr + CVE-2023-4073 + https://github.com/advisories/GHSA-g9wf-6ppg-937x + CVE-2023-4355 + https://github.com/advisories/GHSA-xrw8-8992-37w4 + CVE-2023-4354 + https://github.com/advisories/GHSA-rq4v-7hxq-wpm5 + CVE-2023-4353 + https://github.com/advisories/GHSA-mjq9-8vf6-qh49 + CVE-2023-4351 + https://github.com/advisories/GHSA-mh2g-52mr-mr5v + + + 2023-08-23 + 2023-08-24 + + + + + electron{22,24} -- multiple vulnerabilities + + + electron22 + 22.3.22 + electron24 + 24.8.1 + + + + +

Electron developers report:

+
+

This update fixes the following vulnerabilities:

+
    +
  • Security: backported fix for CVE-2023-4355.
    • +
  • Security: backported fix for CVE-2023-4354.
    • +
  • Security: backported fix for CVE-2023-4353.
    • +
  • Security: backported fix for CVE-2023-4352.
    • +
  • Security: backported fix for CVE-2023-4351.
    • +
+
+ + + + CVE-2023-4355 + https://github.com/advisories/GHSA-xrw8-8992-37w4 + CVE-2023-4354 + https://github.com/advisories/GHSA-rq4v-7hxq-wpm5 + CVE-2023-4353 + https://github.com/advisories/GHSA-mjq9-8vf6-qh49 + CVE-2023-4352 + https://github.com/advisories/GHSA-vp8r-986v-6qj4 + CVE-2023-4351 + https://github.com/advisories/GHSA-mh2g-52mr-mr5v + + + 2023-08-23 + 2023-08-24 + + + phpmyfaq -- multiple vulnerabilities