FreshPorts -- The Place For Ports If you buy from Amazon USA, please support us by using this link.
Follow us
Blog
Twitter

I am looking for an LTO tape library. Do you have one to spare?
Commit found by message id
Thu, 5 Jan 2012
[ 17:25:06 ohauer ] Original commit 
bugzilla3 devel  Deleted Deprecated Expired files touched by this commit  An older version of this port was marked as vulnerable. Bug-tracking system developed by Mozilla Project
- update to version 3.6.7
- CVE-2011-3657
- CVE-2011-3667

Summary
=======

The following security issues have been discovered in Bugzilla:

* When viewing tabular or graphical reports as well as new charts,
  an XSS vulnerability is possible in debug mode.

* The User.offer_account_by_email WebService method lets you create
  a new user account even if the active authentication method forbids
  users to create an account.

* A CSRF vulnerability in post_bug.cgi and in attachment.cgi could
  lead to the creation of unwanted bug reports and attachments.

All affected installations are encouraged to upgrade as soon as possible.

Full Release Notes:
http://www.bugzilla.org/security/3.4.12/

Approved by:    skv@ (explicit)

Number of ports [& non-ports] in this commit: 1

Showing files for just one port: devel/bugzilla3

show all files

hide all files


4 files found
ActionRevisionLinksFile
modify 1.88 View diff View revision /ports/head/devel/bugzilla3/Makefile
modify 1.47 View diff View revision /ports/head/devel/bugzilla3/distinfo
import 1.1 View revision /ports/head/devel/bugzilla3/files/patch-Bugzilla__WebService__Server__JSONRPC.pm
modify 1.38 View diff View revision /ports/head/devel/bugzilla3/pkg-plist
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD

This site
What is FreshPorts?
About the authors
FAQ
How big is it?
The latest upgrade!
Privacy
Forums
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
curlApr 11
dbus-glibApr 11
libaudiofileApr 11
linux-f10-curlApr 11
linux-f10-dbus-glibApr 11
linux-f10-libaudiofileApr 11
linux-f10-nas-libsApr 11
linux-f10-openldapApr 11
mingw32-openssl*Apr 11
mingw32-opensslApr 11
nasApr 11
openssl*Apr 11
opensslApr 11
linux-f10-openssl*Apr 10
linux-f10-openssl*Apr 10

13 vulnerabilities affecting 34 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds


Statistics
Graphs
NEW Graphs (Javascript)
Traffic

Calculated hourly:
Port count 24391
Broken 175
Deprecated 120
Ignore 527
Forbidden 4
Restricted 266
No CDROM 108
Vulnerable 27
Expired 40
Set to expire 105
Interactive 22
new 24 hours 1
new 48 hours3
new 7 days16
new fortnight38
new month149


Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD
Valid HTML, CSS, and RSS.
Copyright © 2000-2014 Dan Langille. All rights reserved.