FreshPorts -- The Place For Ports If you buy from Amazon USA, please support us by using this link.
Follow us
Blog
Twitter

I am looking for an LTO tape library. Do you have one to spare?
Commit found by message id
Thu, 5 Jan 2012
[ 17:25:06 ohauer ] Original commit 
bugzilla3 devel  Deleted Deprecated Expired files touched by this commit  An older version of this port was marked as vulnerable. Bug-tracking system developed by Mozilla Project
- update to version 3.6.7
- CVE-2011-3657
- CVE-2011-3667

Summary
=======

The following security issues have been discovered in Bugzilla:

* When viewing tabular or graphical reports as well as new charts,
  an XSS vulnerability is possible in debug mode.

* The User.offer_account_by_email WebService method lets you create
  a new user account even if the active authentication method forbids
  users to create an account.

* A CSRF vulnerability in post_bug.cgi and in attachment.cgi could
  lead to the creation of unwanted bug reports and attachments.

All affected installations are encouraged to upgrade as soon as possible.

Full Release Notes:
http://www.bugzilla.org/security/3.4.12/

Approved by:    skv@ (explicit)

Number of ports [& non-ports] in this commit: 1

Showing files for just one port: devel/bugzilla3

show all files

hide all files


4 files found
ActionRevisionLinksFile
modify 1.88 View diff View revision /ports/head/devel/bugzilla3/Makefile
modify 1.47 View diff View revision /ports/head/devel/bugzilla3/distinfo
import 1.1 View revision /ports/head/devel/bugzilla3/files/patch-Bugzilla__WebService__Server__JSONRPC.pm
modify 1.38 View diff View revision /ports/head/devel/bugzilla3/pkg-plist
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD

This site
What is FreshPorts?
About the authors
FAQ
How big is it?
The latest upgrade!
Privacy
Forums
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
mcollectiveJul 21
qt4-imageformats*Jul 21
qt5-gui*Jul 21
phpmyadmin*Jul 20
apache24Jul 19
chromiumJul 16
chromiumJul 16
kdelibs4Jul 16
postfixadminJul 13
dbusJul 03
mencoderJun 28
mplayerJun 28
lzo2Jun 26
phpmyadmin*Jun 24
gnupgJun 23

7 vulnerabilities affecting 9 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds


Statistics
Graphs
NEW Graphs (Javascript)
Traffic

Calculated hourly:
Port count 24468
Broken 195
Deprecated 712
Ignore 529
Forbidden 16
Restricted 263
No CDROM 102
Vulnerable 22
Expired 0
Set to expire 699
Interactive 13
new 24 hours 3
new 48 hours3
new 7 days19
new fortnight52
new month107


Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD
Valid HTML, CSS, and RSS.
Copyright © 2000-2014 Dan Langille. All rights reserved.