git: 21d7bdfba4 - main - Porter's Handbook/Security: Update VuXML content

The branch main has been updated by jrm:

URL: https://cgit.FreeBSD.org/doc/commit/?id=21d7bdfba4497c62b000a8434c30c1a9d56dc780

commit 21d7bdfba4497c62b000a8434c30c1a9d56dc780
Author:     Chris Moerz <[email protected]>
AuthorDate: 2024-03-16 15:13:05 +0000
Commit:     Joseph Mingrone <[email protected]>
CommitDate: 2024-03-16 15:19:11 +0000

    Porter's Handbook/Security: Update VuXML content
    
    - Use a valid MITRE CVE instead of outdated CAN
    - Remove obsolete MITRE CVE ids, security focus bug id, US Cert id, and
      US Cert Security alert
    - Update URLs for US Cert vulnerability note and Technical Cyber
      Security Alert
    
    PR:             277068
    Reviewed by:    jrm
    Differential Revision:  https://reviews.freebsd.org/D43992
---
 .../en/books/porters-handbook/security/_index.adoc       | 16 +++-------------
 1 file changed, 3 insertions(+), 13 deletions(-)

diff --git a/documentation/content/en/books/porters-handbook/security/_index.adoc b/documentation/content/en/books/porters-handbook/security/_index.adoc
index 7843b770d7..3c3c77b0b0 100644
--- a/documentation/content/en/books/porters-handbook/security/_index.adoc
+++ b/documentation/content/en/books/porters-handbook/security/_index.adoc
@@ -168,12 +168,8 @@ Now consider a realistic VuXML entry:
   <references> <.>
     <freebsdsa>SA-10:75.foo</freebsdsa> <.>
     <freebsdpr>ports/987654</freebsdpr> <.>
-    <cvename>CAN-2010-0201</cvename> <.>
-    <cvename>CAN-2010-0466</cvename>
-    <bid>96298</bid> <.>
-    <certsa>CA-2010-99</certsa> <.>
+    <cvename>CVE-2023-48795</cvename> <.>
     <certvu>740169</certvu> <.>
-    <uscertsa>SA10-99A</uscertsa> <.>
     <uscertta>SA10-99A</uscertta> <.>
     <mlist msgid="[email protected]">http://marc.theaimsgroup.com/?l=bugtraq&amp;m=203886607825605</mlist> <.>
     <url>http://j.r.hacker.com/advisories/1</url> <.>
@@ -213,15 +209,9 @@ The above example specifies that affected are versions `1.6` and up to but not i
 
 <.> This is a https://cve.mitre.org/[MITRE CVE] identifier.
 
-<.> This is a https://www.securityfocus.com/bid/[SecurityFocus Bug ID].
+<.> This is a https://www.kb.cert.org/vuls/[US-CERT] vulnerability note.
 
-<.> This is a https://www.cert.org/[US-CERT] security advisory.
-
-<.> This is a https://www.cert.org/[US-CERT] vulnerability note.
-
-<.> This is a https://www.cert.org/[US-CERT] Cyber Security Alert.
-
-<.> This is a https://www.cert.org/[US-CERT] Technical Cyber Security Alert.
+<.> This is a https://www.cisa.gov/news-events/cybersecurity-advisories[US-CERT] Technical Cyber Security Alert.
 
 <.> This is a URL to an archived posting in a mailing list. The attribute `msgid` is optional and may specify the message ID of the posting.