git: 1e665dbe14 - main - Porter's Handbook/Security: Update VuXML content

Joseph Mingrone <[email protected]>
Newsgroups gmane.os.freebsd.devel.cvs.doc
Message-ID <[email protected]>
The branch main has been updated by jrm:

URL: https://cgit.FreeBSD.org/doc/commit/?id=1e665dbe1445e032d333b518788f7ec3d4389bd4

commit 1e665dbe1445e032d333b518788f7ec3d4389bd4
Author:     Joseph Mingrone <[email protected]>
AuthorDate: 2024-03-16 13:26:10 +0000
Commit:     Joseph Mingrone <[email protected]>
CommitDate: 2024-03-16 13:38:24 +0000

    Porter's Handbook/Security: Update VuXML content
    
    - Use a valid MITRE CVE instead of outdated CAN
    - Remove obsolete MITRE CVE ids, security focus bug id, US Cert id, and US Cert
      Security alerts
    - Update URLs for US Cert vulnerability note and Technical Cyber
      Security Alert
    
    PR:             277068
    Reviewed by:    jrm
    Sponsored by:   https://reviews.freebsd.org/D43992
---
 .../en/books/porters-handbook/security/_index.adoc       | 16 +++-------------
 1 file changed, 3 insertions(+), 13 deletions(-)

diff --git a/documentation/content/en/books/porters-handbook/security/_index.adoc b/documentation/content/en/books/porters-handbook/security/_index.adoc
index 7843b770d7..3c3c77b0b0 100644
--- a/documentation/content/en/books/porters-handbook/security/_index.adoc
+++ b/documentation/content/en/books/porters-handbook/security/_index.adoc
@@ -168,12 +168,8 @@ Now consider a realistic VuXML entry:
   <references> <.>
     <freebsdsa>SA-10:75.foo</freebsdsa> <.>
     <freebsdpr>ports/987654</freebsdpr> <.>
-    <cvename>CAN-2010-0201</cvename> <.>
-    <cvename>CAN-2010-0466</cvename>
-    <bid>96298</bid> <.>
-    <certsa>CA-2010-99</certsa> <.>
+    <cvename>CVE-2023-48795</cvename> <.>
     <certvu>740169</certvu> <.>
-    <uscertsa>SA10-99A</uscertsa> <.>
     <uscertta>SA10-99A</uscertta> <.>
     <mlist msgid="[email protected]">http://marc.theaimsgroup.com/?l=bugtraq&amp;m=203886607825605</mlist> <.>
     <url>http://j.r.hacker.com/advisories/1</url> <.>
@@ -213,15 +209,9 @@ The above example specifies that affected are versions `1.6` and up to but not i
 
 <.> This is a https://cve.mitre.org/[MITRE CVE] identifier.
 
-<.> This is a https://www.securityfocus.com/bid/[SecurityFocus Bug ID].
+<.> This is a https://www.kb.cert.org/vuls/[US-CERT] vulnerability note.
 
-<.> This is a https://www.cert.org/[US-CERT] security advisory.
-
-<.> This is a https://www.cert.org/[US-CERT] vulnerability note.
-
-<.> This is a https://www.cert.org/[US-CERT] Cyber Security Alert.
-
-<.> This is a https://www.cert.org/[US-CERT] Technical Cyber Security Alert.
+<.> This is a https://www.cisa.gov/news-events/cybersecurity-advisories[US-CERT] Technical Cyber Security Alert.
 
 <.> This is a URL to an archived posting in a mailing list. The attribute `msgid` is optional and may specify the message ID of the posting.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.