| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
1.1_4
26 Jan 2020 17:51:44
   |
kwm  |
Document webkit-gtk3 vulnabilities. |
1.1_4
24 Jan 2020 22:20:00
|
kai |
security/vuxml: Document graphics/py-pillow issues
PR: 243336
Security: CVE-2019-19911
CVE-2020-5310
CVE-2020-5311
CVE-2020-5312
CVE-2020-5313 |
1.1_4
20 Jan 2020 11:07:29
|
joneum |
Add entry for www/gitea
PR: 243437
Reported by: stb@lassitu.de
Sponsored by: Netzkommune GmbH |
1.1_4
15 Jan 2020 20:23:39
|
brnrd |
security/vuxml: Document 2020Q1 Oracle MySQL Vulns |
1.1_4
15 Jan 2020 13:54:43
|
zeising |
vuxml: Document recent intel GPU vulnerability |
1.1_4
14 Jan 2020 13:57:11
|
adamw |
VuXML: Add entry for p5-Template-Toolkit directory traversal bug |
1.1_4
14 Jan 2020 07:28:53
|
mfechner |
Document gitlab vulnerability. |
1.1_4
11 Jan 2020 18:32:15
|
mandree |
mark e2fsprogs vulnerable, CVE-2019-5188
Security: 8b61308b-322a-11ea-b34b-1de6fb24355d
Security: CVE-2019-5188 |
1.1_4
11 Jan 2020 08:19:40
|
mfechner |
Document phpMyAdmin vulnerability. |
1.1_4
06 Jan 2020 17:27:47
|
kai |
security/vuxml: Document net-mgmt/cacti issues
PR: 242834
Submitted by: Michael Muenz <m.muenz@gmail.com> (based on)
Security: CVE-2019-17357
CVE-2019-17358 |
1.1_4
03 Jan 2020 09:18:21
|
mfechner |
Document gitlab vulnerabilities. |
1.1_4
29 Dec 2019 12:58:29
|
sunpoet |
Document rubygem-rack vulnerability |
1.1_4
29 Dec 2019 12:11:09
|
mandree |
Document graphics/ilmbase graphics/openexr vulnerabilities.
Security: e4d9dffb-2a32-11ea-9693-e1b3f6feec79
Security: CVE-2018-18443
Security: CVE-2018-18444 |
1.1_4
26 Dec 2019 10:03:18
|
joneum |
Add entry for wordpress
Sponsored by: Netzkommune GmbH |
1.1_4
25 Dec 2019 12:25:56
|
joneum |
Add entry for typo3
PR: 242707 242708
Sponsored by: Netzkommune GmbH |
1.1_4
21 Dec 2019 11:04:12
|
mandree |
Add vulnerability of e2fsprogs quota code < 1.45.4
Security: ad3451b9-23e0-11ea-8b36-f1925a339a82
Security: CVE-2019-5094 |
1.1_4
21 Dec 2019 02:36:58
|
acm |
- Re-add py-matrix-synapse entry |
1.1_4
21 Dec 2019 02:28:27
|
acm |
- Add drupal[78] entry |
1.1_4
20 Dec 2019 21:05:44
|
decke |
Document py-matrix-synapse vulnerabilities
PR: 242702
Submitted by: Sascha Biberhofer <ports@skyforge.at> |
1.1_4
20 Dec 2019 15:04:42
|
brnrd |
security/vuxml: Document OpenSSL 1.0.2 vuln |
1.1_4
13 Dec 2019 20:34:37
|
swills |
Fix typo
PR: 242627
Submitted by: lightside <lightside@gmx.com> |
1.1_4
13 Dec 2019 20:03:39
|
cy |
Document two new spamassassin 3.4.2 vulnerabilities.
CVE-2019-12420 for Multipart Denial of Service Vulnerability
CVE-2018-11805 for nefarious CF files can be configured to run system
commands without any output or errors. |
1.1_4
13 Dec 2019 16:11:07
|
timur |
Add entry for Samba4 CVE-2019-14861 and CVE-2019-14870
Security: CVE-2019-14861
CVE-2019-14870 |
1.1_4
13 Dec 2019 14:40:53
|
ler |
security/vuxml: dovecot vulnerability |
1.1_4
10 Dec 2019 21:06:04
|
mfechner |
Document gitlab vulnerabilities. |
1.1_4
10 Dec 2019 17:16:26
|
sunpoet |
Update libidn2 vulnerability
Reported by: Stephen Wall <stephen.wall@redcom.com>, jkim |
1.1_4
09 Dec 2019 20:54:17
|
tijl |
Document Ghostscript vulnerabilities.
Security: CVE-2019-14811, CVE-2019-14812, CVE-2019-14813, CVE-2019-14817 |
1.1_4
06 Dec 2019 20:22:53
|
joneum |
Add entry for phpmyadmin
Sponsored by: Netzkommune GmbH |
1.1_4
04 Dec 2019 20:32:39
|
zeising |
vuxml: Add drm-fbsd11.2-kmod to drm vulnerability
Add drm-fbsd11.2-kmod to the list of packages vulnerable to the
drm graphics drivers -- Local privilege escalation and denial of serivce
entry. |
1.1_4
03 Dec 2019 03:04:35
|
wen |
- Document Django multiple vulnerabilities |
1.1_4
28 Nov 2019 15:44:53
|
decke |
Document net-im/py-matrix-synapse vulnerabilities
PR: 241574
Submitted by: Sascha Biberhofer <ports@skyforge.at> |
1.1_4
28 Nov 2019 07:02:12
|
mfechner |
Document gitlab-ce vulnerability. |
1.1_4
27 Nov 2019 19:04:25
|
mfechner |
Document www/gitlab-ce vulnerabilities. |
1.1_4
27 Nov 2019 16:32:49
|
kwm |
Document webkit2-gtk3 vulnabilities |
1.1_4
26 Nov 2019 11:51:30
|
kai |
security/vuxml: Document net/py-urllib3 issues
PR: 229322
Security: CVE-2018-20060
CVE-2019-11236
CVE-2019-11324 |
1.1_4
25 Nov 2019 21:45:06
|
dch |
security/vuxml: add FreeBSD kernel entries for recent Intel CVEs
PR: 241931
Submitted by: Miroslav Lachman <000.fbsd@quip.cz>
Reviewed by: dch
Approved by: joneum (ports-secteam)
Security: CVE-2019-11135
Security: CVE-2019-11139
Security: CVE-2018-12126
Security: CVE-2018-12127
Security: CVE-2018-12130
Security: CVE-2018-11091
Security: CVE-2017-5715
Security: CVE-2018-12207
Sponsored by: SkunkWerks, GmbH |
1.1_4
25 Nov 2019 09:18:43
|
joneum |
Add entry for security/clamav
PR: 242118
Sponsored by: Netzkommune GmbH |
1.1_4
23 Nov 2019 12:50:59
|
joneum |
Add entry for dns/unbound
PR: 242075
Sponsored by: Netzkommune GmbH |
1.1_4
22 Nov 2019 11:15:10
|
kai |
security/vuxml: Document www/gitea issues
PR: 241981
Submitted by: Nils Johannsen <nilsjohannsen@gmx.de> (based on)
Approved by: stb@lassitu.de (maintainer) |
1.1_4
22 Nov 2019 09:03:50
|
madpilot |
Document asterisk vulnerabilities. |
1.1_4
22 Nov 2019 09:01:54
|
madpilot |
Remove extra whitespace. |
1.1_4
20 Nov 2019 10:57:40
|
zeising |
Document intel drm driver vulnerabilities
Document intel drm driver vulnerabilities related to Intel 2019.2 IPU [1].
[1]
https://blogs.intel.com/technology/2019/11/ipas-november-2019-intel-platform-update-ipu |
1.1_4
19 Nov 2019 08:25:04
|
joneum |
Add entry for www/squid
PR: 241976
Sponsored by: Netzkommune GmbH |
1.1_4
18 Nov 2019 18:13:57
|
sunpoet |
Document libidn2 vulnerability |
1.1_4
15 Nov 2019 22:46:16
|
naddy |
Document vulnerabilities in GNU cpio < 2.13. |
1.1_4
13 Nov 2019 23:45:36
|
sunpoet |
Document libmad vulnerability |
1.1_4
12 Nov 2019 21:38:20
|
gjb |
Fix build.
Sponsored by: Rubicon Communications, LLC (netgate.com) |
1.1_4
12 Nov 2019 21:01:03
|
rene |
Document new vulnerability in www/chromium < 78.0.3904.97 |
1.1_4
12 Nov 2019 08:16:35
|
joneum |
fix typo
Sponsored by: Netzkommune GmbH |
1.1_4
12 Nov 2019 07:42:06
|
joneum |
Add entry for wordpress
Sponsored by: Netzkommune GmbH |
1.1_4
07 Nov 2019 12:09:25
|
dmgk |
security/vuxml: Document nexus2-oss vulnerabilities
PR: 241308
Approved by: tz (mentor, implicit) |
1.1_4
07 Nov 2019 11:55:10
|
danfe |
Adjust affected GNU patch package version after r516964. |
1.1_4
06 Nov 2019 21:48:53
|
tz |
security/vuxml: Document PHP RCE issues |
1.1_4
03 Nov 2019 03:11:07
|
wen |
- Document mediawiki's multiple vulnerabilities |
1.1_4
02 Nov 2019 14:33:45
|
brnrd |
security/vuxml: Document MySQL quarterly vulns |
1.1_4
02 Nov 2019 12:26:06
|
rakuco |
Adjust entry 381deebb-f5c9-11e9-9c4f-74d435e60b7c for sysutils/file.
Upstream version 5.37 is vulnerable, but the update to 5.37 in the ports tree
was landed with a fix for the CVE entry.
PR: 241424 |
1.1_4
02 Nov 2019 12:19:34
|
rakuco |
Add entry for heap buffer overflow in sysutils/file.
PR: 241424
Submitted by: Nathan Owens <ndowens04@gmail.com>
Approved by: jharris@widomaker.com (maintainer) |
1.1_4
31 Oct 2019 20:43:57
|
kwm |
Document webkit-gtk3 vulnerabilities. |
1.1_4
31 Oct 2019 12:03:22
|
dmgk |
Document www/gitea information disclosure vulnerability
PR: 241599
Submitted by: stb@lassitu.de (maintainer)
Approved by: tz (mentor, implicit) |
1.1_4
31 Oct 2019 09:14:19
|
gjb |
Fix build.
Sponsored by: Rubicon Communications, LLC (Netgate) |
1.1_4
31 Oct 2019 02:02:21
|
timur |
Add entry about Samba vulnerabilities
o CVE-2019-10218:
Malicious servers can cause Samba client code to return filenames containing
path separators to calling code.
o CVE-2019-14833:
When the password contains multi-byte (non-ASCII) characters, the check
password script does not receive the full password string.
o CVE-2019-14847:
Users with the "get changes" extended access right can crash the AD DC LDAP
server by requesting an attribute using the range= syntax.
Security: CVE-2019-10218
CVE-2019-14833
CVE-2019-14847
Sponsored by: my wife |
1.1_4
30 Oct 2019 18:47:59
|
mfechner |
Document gitlab vulnerabilities. |
1.1_4
24 Oct 2019 17:08:53
|
feld |
Add missing FreeBSD SAs
Security: FreeBSD-SA-19:24.mqueuefs
Security: FreeBSD-SA-19:23.midi
Security: FreeBSD-SA-19:22.mbuf
Security: FreeBSD-SA-19:21.bhyve
Security: FreeBSD-SA-19:20.bsnmp
Security: FreeBSD-SA-19:19.mldv2
Security: FreeBSD-SA-19:18.bzip2 |
1.1_4
24 Oct 2019 16:45:05
|
feld |
Document Varnish VSV00004 Workspace information leak |
1.1_4
24 Oct 2019 10:38:57
|
rodrigo |
Document potential bypass of Runas user restrictions in sudo
PR: 241244
Submitted by: Yasuhiro KIMURA <yasu@utahime.org> |
1.1_4
23 Oct 2019 17:46:36
|
sunpoet |
Document rubygem-loofah vulnerability |
1.1_4
19 Oct 2019 09:52:18
|
wen |
- Document python37 multiple vulnerabilities. |
1.1_4
15 Oct 2019 14:43:02
|
kai |
security/vuxml: Document graphics/py-pillow issue
PR: 241268
Security: CVE-2019-16865 |
1.1_4
11 Oct 2019 17:36:37
|
pi |
security/vuxml: mongodb vulnerabilities
- CVE-2019-2386, CVE-2019-2389, CVE-2019-2390
PR: 239717
Submitted by: Ronald Klop <ronald-lists@klop.ws> |
1.1_4
09 Oct 2019 12:31:58
|
egypcio |
security/vuxml: add CVE-2011-2767 [www/mod_perl2]
https://nvd.nist.gov/vuln/detail/CVE-2011-2767 |
1.1_4
06 Oct 2019 05:52:58
|
cy |
Take PORTEPOCH into account.
PR: 241066
Reported by: tobik |
1.1_4
06 Oct 2019 01:48:50
|
cy |
Document two new Xpdf vulnerabilities: CVE-2019-16927 and CVE-2019-9877.
PR: 241066
Security: https://nvd.nist.gov/vuln/detail/CVE-2019-16927
Security: https://nvd.nist.gov/vuln/detail/CVE-2019-9877
Security: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9877
Security: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16927 |
1.1_4
03 Oct 2019 19:28:42
|
sunpoet |
Document unbound vulnerability |
1.1_4
02 Oct 2019 19:24:50
|
sunpoet |
Document ruby vulnerability |
1.1_4
02 Oct 2019 16:20:16
|
mfechner |
Document gitlab vulnerabilities. |
1.1_4
02 Oct 2019 16:16:25
|
mfechner |
Document gitlab vulnerabilities. |
1.1_4
02 Oct 2019 16:06:43
|
mfechner |
Documented gitlab vulnerabilities. |
1.1_4
02 Oct 2019 09:43:49
|
kai |
security/vuxml: Document net-mgmt/cacti issue
PR: 240999
Reported by: Michael Muenz <m.muenz@gmail.com>
Security: CVE-2019-16723 |
1.1_4
29 Sep 2019 13:09:04
|
vsevolod |
Fix misprint |
1.1_4
29 Sep 2019 08:26:15
|
vsevolod |
Document RCE in Exim: CVE-2019-16928 |
1.1_4
28 Sep 2019 11:51:00
|
dmgk |
security/vuxml: Add entry for lang/go and lang/go-devel CVE-2019-16276
Approved by: araujo (mentor)
Differential Revision: https://reviews.freebsd.org/D21802 |
1.1_4
27 Sep 2019 19:30:18
|
tobik |
Document databases/mantis vulnerabilities |
1.1_4
25 Sep 2019 23:07:20
|
lwhsu |
Document Jenkins Security Advisory 2019-09-25
Sponsored by: The FreeBSD Foundation |
1.1_4
23 Sep 2019 09:01:55
|
tijl |
Add linux-c6-openssl to CVE-2019-1559 entry.
Security: https://access.redhat.com/errata/RHSA-2019:2471 |
1.1_4
20 Sep 2019 15:56:44
|
pi |
security/vuxml: add CVEs for net/kea
PR: 240399
Submitted by: Andrey Pevnev <apevnev@me.com> |
1.1_4
19 Sep 2019 12:43:20
|
pi |
security/vuxml: add entry for CVE-2019-15903 in expat < 2.2.8
PR: 240613
Submitted by: Sergei Vyshenski <svysh.fbsd@gmail.com> (maintainer) |
1.1_4
19 Sep 2019 09:40:37
|
tijl |
Document Mbed TLS side channel attack on deterministic ECDSA.
Security: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2019-10 |
1.1_4
17 Sep 2019 22:50:11
|
leres |
security/vuxml: Mark bro < 2.6.4 as vulnerable as per:
https://raw.githubusercontent.com/zeek/zeek/3b5a9f88ece1d274edee897837e280ef751bde94/NEWS
The issue is inproper data handling of data that is either either
empty or unterminated, resulting in invalid memory access or heap
buffer over-read.
Approved by: matthew (mentor, implicit) |
1.1_4
16 Sep 2019 11:45:32
|
pi |
security/vuxml: fix vuln.xml entry for expat
PR: 238864
Submitted by: tobik |
1.1_4
16 Sep 2019 11:19:51
|
pi |
security/vuxml: document expat2 pre-2.2.7 vulnerability
PR: 238864
Submitted by: Sergei Vyshenski <svysh.fbsd@gmail.com> |
1.1_4
16 Sep 2019 06:05:59
|
brnrd |
security/vuxml: Fix latest openssl entry
Reported by: tobik |
1.1_4
14 Sep 2019 21:17:26
|
sunpoet |
Document curl vulnerability |
1.1_4
11 Sep 2019 08:30:57
|
brnrd |
security/vuxml: Document OpenSSL vulnerabilities |
1.1_4
11 Sep 2019 00:33:36
|
jkim |
Document the latest Flash Player vulnerabilities.
https://helpx.adobe.com/security/products/flash-player/apsb19-46.html |
1.1_4
07 Sep 2019 21:07:45
|
mandree |
Document devel/oniguruma < 6.9.3 vulnerabilities.
PR: 240368
Reported by: Pascal Christen
Obtained from: MITRE
Security: a8d87c7a-d1b1-11e9-a616-0992a4564e7c
Security: CVE-2019-13224
Security: CVE-2019-13225 |
1.1_4
07 Sep 2019 13:43:29
|
feld |
Document recent xymon-server CVEs |
1.1_4
06 Sep 2019 12:46:11
|
joneum |
Add entry for wordpress
Sponsored by: Netzkommune GmbH |
1.1_4
06 Sep 2019 10:37:07
|
vsevolod |
Document Exim vulnerability |
1.1_4
06 Sep 2019 07:53:14
|
madpilot |
Document asterisk vulnerabilities. |
1.1_4
03 Sep 2019 23:32:13
|
timur |
Add entry about CVE-2019-10197
On a Samba SMB server for all versions of Samba from 4.9.0 clients are
able to escape outside the share root directory if certain
configuration parameters set in the smb.conf file.
Security: CVE-2019-10197 |
As an Amazon Associate I earn from qualifying purchases.
