FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The last vuln.xml file processed by FreshPorts is:

Revision:  318877
Date:      2013-05-23
Time:      15:30:07Z
Committer: flo

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
a8864f8f-aa9e-11e1-a284-0023ae8e59f0	databases/postgresql-server -- crypt vulnerabilities The PostgreSQL Global Development Group reports: Today the PHP, OpenBSD and FreeBSD communities announced updates to patch a security hole involving their crypt() hashing algorithms. This issue is described in CVE-2012-2143. This vulnerability also affects a minority of PostgreSQL users, and will be fixed in an update release on June 4, 2012. Affected users are those who use the crypt(text, text) function with DES encryption in the optional pg_crypto module. Passwords affected are those that contain characters that cannot be represented with 7-bit ASCII. If a password contains a character that has the most significant bit set (0x80), and DES encryption is used, that character and all characters after it will be ignored. Discovery 2012-05-30 Entry 2012-05-30 Modified 2012-05-31 postgresql-server gt 8.3. lt 8.3.18_1 gt 8.4.* lt 8.4.11_1 gt 9.0.* lt 9.0.7_2 gt 9.1.* lt 9.1.3_1 gt 9.2.* lt 9.2.b1_1 CVE-2012-2143 http://www.postgresql.org/about/news/1397/ http://git.postgresql.org/gitweb/?p=postgresql.git;a=patch;h=932ded2ed51e8333852e370c7a6dad75d9f236f9
a8864f8f-aa9e-11e1-a284-0023ae8e59f0	databases/postgresql-server -- crypt vulnerabilities The PostgreSQL Global Development Group reports: Today the PHP, OpenBSD and FreeBSD communities announced updates to patch a security hole involving their crypt() hashing algorithms. This issue is described in CVE-2012-2143. This vulnerability also affects a minority of PostgreSQL users, and will be fixed in an update release on June 4, 2012. Affected users are those who use the crypt(text, text) function with DES encryption in the optional pg_crypto module. Passwords affected are those that contain characters that cannot be represented with 7-bit ASCII. If a password contains a character that has the most significant bit set (0x80), and DES encryption is used, that character and all characters after it will be ignored. Discovery 2012-05-30 Entry 2012-05-30 Modified 2012-05-31 postgresql-server gt 8.3. lt 8.3.18_1 gt 8.4.* lt 8.4.11_1 gt 9.0.* lt 9.0.7_2 gt 9.1.* lt 9.1.3_1 gt 9.2.* lt 9.2.b1_1 CVE-2012-2143 http://www.postgresql.org/about/news/1397/ http://git.postgresql.org/gitweb/?p=postgresql.git;a=patch;h=932ded2ed51e8333852e370c7a6dad75d9f236f9

VuXML ID

Description

a8864f8f-aa9e-11e1-a284-0023ae8e59f0

databases/postgresql*-server -- crypt vulnerabilities

The PostgreSQL Global Development Group reports:

Today the PHP, OpenBSD and FreeBSD communities announced updates to patch a security hole involving their crypt() hashing algorithms. This issue is described in CVE-2012-2143. This vulnerability also affects a minority of PostgreSQL users, and will be fixed in an update release on June 4, 2012.

Affected users are those who use the crypt(text, text) function with DES encryption in the optional pg_crypto module. Passwords affected are those that contain characters that cannot be represented with 7-bit ASCII. If a password contains a character that has the most significant bit set (0x80), and DES encryption is used, that character and all characters after it will be ignored.

Discovery 2012-05-30
Entry 2012-05-30
Modified 2012-05-31
postgresql-server

gt 8.3.* lt 8.3.18_1

gt 8.4.* lt 8.4.11_1

gt 9.0.* lt 9.0.7_2

gt 9.1.* lt 9.1.3_1

gt 9.2.* lt 9.2.b1_1

CVE-2012-2143
http://www.postgresql.org/about/news/1397/
http://git.postgresql.org/gitweb/?p=postgresql.git;a=patch;h=932ded2ed51e8333852e370c7a6dad75d9f236f9