| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
1.1_4
16 Jun 2019 17:07:14
   |
marcus  |
Add an entry for netatalk3.
Document the netatalk3 remote code execution vulnerability fixed in 3.1.12.
PR: 238573 |
1.1_4
16 Jun 2019 10:38:42
|
sunpoet |
Document GraphicsMagick vulnerability |
1.1_4
15 Jun 2019 14:06:58
|
rene |
security/vuxml: add entry for www/chromium < 75.0.3770.90 |
1.1_4
14 Jun 2019 06:48:52
|
matthew |
Document PMASA-2019-4; CSRF vulnerability in login form |
1.1_4
13 Jun 2019 18:41:56
|
adamw |
Add entry for Vim/NeoVim arbitrary code execution |
1.1_4
12 Jun 2019 17:17:02
|
joneum |
Add entry for www/mybb
Sponsored by: Netzkommune GmbH |
1.1_4
11 Jun 2019 21:11:17
|
jkim |
Document the latest Flash Player vulnerability.
https://helpx.adobe.com/security/products/flash-player/apsb19-30.html |
1.1_4
08 Jun 2019 18:52:51
|
joneum |
Set correct Port Name for last drupal7 entry
Sponsored by: Netzkommune GmbG |
1.1_4
08 Jun 2019 14:24:15
|
gjb |
Fix vuxml build.
Sponsored by: The FreeBSD Foundation |
1.1_4
08 Jun 2019 08:23:47
|
joneum |
Add entry for drupal7
- Set correct modified Date for 183d700e-ec70-487e-a9c4-632324afa934
Sponsored by: Netzkommune GmbH |
1.1_4
06 Jun 2019 12:26:54
|
vsevolod |
Document Exim RCE CVE-2019-10149 |
1.1_4
06 Jun 2019 02:30:55
|
wen |
- Document Django vulnerabilities. |
1.1_4
05 Jun 2019 15:08:32
|
kwm |
Fix modification date, the future isn't quite here yet.
Reported by: Daniel Ebdrup |
1.1_4
04 Jun 2019 04:51:09
|
kwm |
Fix Imagemagick 6 package name. |
1.1_4
03 Jun 2019 14:44:13
|
mfechner |
Document gitlab vulnerabilities. |
1.1_4
01 Jun 2019 13:48:59
|
koobs |
security/vuxml: Add buildbot -- OAuth Authentication Vulnerability |
1.1_4
31 May 2019 19:17:59
|
leres |
security/vuxml: Mark bro < 2.6.2 as vulnerable as per:
https://raw.githubusercontent.com/zeek/zeek/bb979702cf9a2fa67b8d1a1c7f88d0b56c6af104/NEWS
The issue is unsafe integer conversions that can cause unintentional
code paths to be executed.
Reviewed by: ler (mentor)
Approved by: ler (mentor)
Security: CVE-2019-12175
Differential Revision: https://reviews.freebsd.org/D20481 |
1.1_4
30 May 2019 10:58:17
|
kwm |
Document ImageMagick issues.
PR: 238199
Reported by: Tommy P <tommyhp2@gmail.com>
Security: CVE-2019-7175, CVE-2019-7395, CVE-2019-7396, CVE-2019-7397,
CVE-2019-7398, CVE-2019-9956, CVE-2019-10131, CVE-2019-10649,
CVE-2019-10650, CVE-2019-10714, CVE-2019-11470, CVE-2019-11472,
CVE-2019-11597, CVE-2019-11598 |
1.1_4
27 May 2019 16:20:16
|
ume |
fix package name of cyrus-imapd. |
1.1_4
27 May 2019 14:26:45
|
ume |
Document cyrus-imapd buffer overrun in httpd.
Security: CVE-2019-11356 |
1.1_4
26 May 2019 18:02:35
|
sunpoet |
Remove superfluous dot |
1.1_4
26 May 2019 14:52:11
|
cs |
Clarify CVE-2019-10691 |
1.1_4
26 May 2019 13:55:39
|
cs |
Serendipity -- XSS
Security: CVE-2019-11870 |
1.1_4
26 May 2019 13:45:33
|
cs |
Add missing quote link |
1.1_4
26 May 2019 13:43:18
|
cs |
SQLite use after free
Security: CVE-2019-5018 |
1.1_4
26 May 2019 13:21:55
|
cs |
Add proper cvename reference to recent OCaml entry |
1.1_4
26 May 2019 13:17:17
|
cs |
suricata vulnerability
Security: CVE-2019-10053 |
1.1_4
25 May 2019 22:05:13
|
sunpoet |
Document curl vulnerability |
1.1_4
23 May 2019 19:43:29
|
cs |
Multiple vulnerabilities in OCaml
PR: 223039
Submitted by: Phil Pennock <freebsd@phil.spodhuis.org>
Security: CVE-2015-8869 |
1.1_4
22 May 2019 11:00:52
|
jbeich |
security/vuxml: mark firefox < 67 as vulnerable |
1.1_4
18 May 2019 01:23:59
|
timur |
Add entry about Samba4* vulnerabilities.
Security: CVE-2018-16860
CVE-2019-3880 |
1.1_4
15 May 2019 03:08:32
|
tobik |
Add recent lang/rust security advisory |
1.1_4
14 May 2019 21:19:03
|
jkim |
Document the latest Flash Player vulnerability.
https://helpx.adobe.com/security/products/flash-player/apsb19-26.html |
1.1_4
11 May 2019 09:14:21
|
brnrd |
security/vuxml: Document PHP-exif vulnerabilities |
1.1_4
10 May 2019 12:41:16
|
girgen |
Add security issues from latest postgresql release |
1.1_4
06 May 2019 08:47:08
|
joneum |
Add entry for www/gitea
PR: 237734
Sponsored by: Netzkommune GmbH |
1.1_4
05 May 2019 02:34:31
|
koobs |
security/vuxml: Add comms/hylafax -- Malformed fax sender remote code execution
in JPEG support |
1.1_4
01 May 2019 07:16:46
|
mfechner |
Documented vulnerability for gitlab. |
1.1_4
30 Apr 2019 23:35:08
|
ler |
security/vuxml: correct dovecot entry.
Reported by: leres |
1.1_4
30 Apr 2019 21:02:33
|
ler |
security/vuxml: document dovecot vulnerabilities |
1.1_4
29 Apr 2019 20:33:08
|
mfechner |
Document gitlab vulnerabilities. |
1.1_4
26 Apr 2019 11:29:17
|
koobs |
security/vuxml: Add buildbot CRLF injection vulnerability |
1.1_4
25 Apr 2019 02:05:05
|
acm |
- Add drupal7 and drupal8 entries |
1.1_4
24 Apr 2019 16:55:13
|
swills |
add missed PORTEPOCH to libssh2 version |
1.1_4
24 Apr 2019 15:30:40
|
jpaetzel |
Document py-yaml vulnerability
PR: 237501
Submitted by: sergey@akhmatov.ru
Security: CVE-2017-18342 |
1.1_4
23 Apr 2019 03:03:45
|
cy |
Document wpa_supplicant/hostapd EAP-pwd message reassembly issue with
unexpected fragment.
Security: no CVE documented,
https://w1.fi/security/2019-5/eap-pwd-message-reassembly-issue-\
with-unexpected-fragment.txt |
1.1_4
23 Apr 2019 03:03:40
|
cy |
Document wpa_supplicant/hostapd EAP-pwd missing commit validation.
CVE-2019-9497 (EAP-pwd server not checking for reflection attack)
CVE-2019-9498 (EAP-pwd server missing commit validation for
scalar/element)
CVE-2019-9499 (EAP-pwd peer missing commit validation for
scalar/element)
Security: CVE-2019-9497, CVE-2019-9498, CVE-2019-9499,
https://w1.fi/security/2019-4/eap-pwd-missing-commit-validation.txt |
1.1_4
23 Apr 2019 03:03:35
|
cy |
Document hostapd SAE confirm missing state validation.
CVE-2019-9496 (SAE confirm missing state validation in hostapd/AP)
Security: CVE-2019-9496,
https://w1.fi/security/2019-3/sae-confirm-missing-state-validation.txt |
1.1_4
23 Apr 2019 03:03:30
|
cy |
Document wpa_supplicant/hostapd EAP-pwd side-channel attack.
CVE-2019-9495 (cache attack against EAP-pwd)
Security: CVE-2019-9495,
https://w1.fi/security/2019-2/eap-pwd-side-channel-attack.txt |
1.1_4
23 Apr 2019 03:03:25
|
cy |
Document wpa_supplicant/hostapd SAE side-channel attacks.
CVE-2019-9494 (cache attack against SAE)
Security: CVE-2019-9494, VU#871675,
https://w1.fi/security/2019-1/sae-side-channel-attacks.txt |
1.1_4
22 Apr 2019 20:30:19
|
danilo |
- Document istio vulnerabilities. |
1.1_4
21 Apr 2019 17:35:59
|
tijl |
Document Ghostscript CVE-2019-3835 and CVE-2019-3838.
PR: 237390
Security: CVE-2019-3835, CVE-2019-3838 |
1.1_4
19 Apr 2019 14:42:42
|
tijl |
Document GNUTLS-SA-2019-03-27.
Security: https://www.gnutls.org/security-new.html#GNUTLS-SA-2019-03-27 |
1.1_4
18 Apr 2019 15:21:04
|
ler |
security/vuxml: Document dovecot json encoder issue |
1.1_4
18 Apr 2019 10:36:50
|
swills |
Document libssh2 issue |
1.1_4
17 Apr 2019 06:35:18
|
joneum |
Add entry for gitea
PR: 237303
Sponsored by: Netzkommune GmbH |
1.1_4
13 Apr 2019 13:53:22
|
brnrd |
security/vuxml: Document vulnerabilities for MySQL
- Pre-notification by Oracle, final to be published in 3 days |
1.1_4
12 Apr 2019 08:43:30
|
vd |
Document ftp/wget's metadata in extended attributes vulnerability
Security: CVE-2018-20483 |
1.1_4
11 Apr 2019 05:47:33
|
mfechner |
Document gitlab vulnerability. |
1.1_4
10 Apr 2019 15:30:26
|
lwhsu |
Document Jenkins Security Advisory 2019-04-10
Sponsored by: The FreeBSD Foundation |
1.1_4
10 Apr 2019 07:52:51
|
jkim |
Document the latest Flash Player vulnerabilities.
https://helpx.adobe.com/security/products/flash-player/apsb19-19.html |
1.1_4
06 Apr 2019 14:46:00
|
sunpoet |
Update py-notebook status |
1.1_4
05 Apr 2019 06:22:10
|
mfechner |
Documented vulnerabilities for clamav. |
1.1_4
03 Apr 2019 17:22:25
|
romain |
Update sysutils/puppetserver5 entry
Puppetlabs released version 5.3.8 of Puppet Server which address the issue:
https://puppet.com/docs/puppetserver/5.3/release_notes.html#puppet-server-538
With hat: puppet |
1.1_4
02 Apr 2019 20:48:08
|
mfechner |
Documented gitlab vulnerability. |
1.1_4
02 Apr 2019 07:58:42
|
brnrd |
security/vuxml: Document Apache httpd vulnerabilities |
1.1_4
01 Apr 2019 19:29:47
|
danilo |
- Document sysutils/kubectl CVE-2019-1002101 |
1.1_4
31 Mar 2019 13:50:46
|
dbaio |
security/vuxml: Document irc/znc issue
Security: CVE-2019-9917 |
1.1_4
29 Mar 2019 16:36:03
|
sunpoet |
Document py-notebook vulnerability |
1.1_4
29 Mar 2019 14:17:12
|
sunpoet |
Update openjpeg status |
1.1_4
28 Mar 2019 12:21:37
|
ler |
vuxml: Document mail/dovecot buffer overflow. |
1.1_4
28 Mar 2019 08:26:50
|
joneum |
Add modified line for drupal after r496987
Sponsored by: Netzkommune GmbH |
1.1_4
27 Mar 2019 21:51:40
|
acm |
- Update 94d63fd7-508b-11e9-9ba0-4c72b94353b5 entry |
1.1_4
27 Mar 2019 19:23:40
|
sunpoet |
Update Python vulnerability (d74371d2-4fee-11e9-a5cd-1df8a848de3d) |
1.1_4
27 Mar 2019 17:44:06
|
joneum |
Add entry for www/drupal7
Sponsored by: Netzkommune GmbH |
1.1_4
26 Mar 2019 18:12:24
|
sunpoet |
Document Python vulnerability |
1.1_4
22 Mar 2019 04:08:55
|
zeising |
Update the libXdmcp entry to make it clearer. |
1.1_4
21 Mar 2019 09:36:32
|
joneum |
Add entry for wordpress
Sponsored by: Netzkommune GmbH |
1.1_4
21 Mar 2019 08:15:01
|
mfechner |
Documented gitlab vulnerability. |
1.1_4
21 Mar 2019 02:03:35
|
zeising |
Add entry for x11/libXdmcp vulnerabilty.
Add entry for x11/libXdmcp vulnerabilty, insufficient entripy generating
session keys. It is unknown if this actually affects FreeBSD.
Security: CVE-2017-2625 |
1.1_4
20 Mar 2019 14:04:46
|
mfechner |
Documented security vulnerability for gitlab < 11.8.2. |
1.1_4
20 Mar 2019 11:30:19
|
joneum |
Add entry for www/gitea
PR: 236563 |
1.1_4
19 Mar 2019 20:22:21
|
jbeich |
security/vuxml: mark firefox < 66 as vulnerable |
1.1_4
19 Mar 2019 14:51:03
|
swills |
Document PowerDNS issue
PR: 236634
Reported by: Dani <i.dani@outlook.com> |
1.1_4
18 Mar 2019 18:25:00
|
sunpoet |
Document Rails vulnerability |
1.1_4
17 Mar 2019 14:16:03
|
mandree |
Record PuTTY security vulnerabilities in versions before 0.71. |
1.1_4
16 Mar 2019 23:23:16
|
sunpoet |
Document py-notebook vulnerability |
1.1_4
15 Mar 2019 21:42:03
|
sunpoet |
Document ruby-gems vulnerability |
1.1_4
12 Mar 2019 06:14:06
|
riggs |
Document CVE fixes in libsndfile-1.0.28_2
PR: 227669
Reported by: p5B2E9A8F@t-online.de |
1.1_4
08 Mar 2019 02:26:17
|
cy |
Fill in the actual URL for March 2019 ntp-4.2.8p13 NTP Release and
Security Vulnerability Announcement |
1.1_4
07 Mar 2019 19:33:24
|
brnrd |
security/vuxml: Document OpenSSL 1.1.1 vulnerability |
1.1_4
07 Mar 2019 13:32:42
|
cy |
Document crafted ull dereference ntp attack.
Security: CVE-2019-8936
Obtained from: nwtime.org |
1.1_4
06 Mar 2019 19:56:57
|
kai |
security/vuxml: Document shells/rssh < 2.3.4_2 vulnerabilities
PR: 235121
Approved by: tcberner (mentor)
Differential Revision: https://reviews.freebsd.org/D19473 |
1.1_4
06 Mar 2019 07:31:17
|
matthew |
Document a jQuery related XSS security fix in rt4.4.4 and rt4.2.16
Note: the release notes also mention 3 other security issues in perl
modules depended on by these packages. Of those, vulnerabilities in
the Email::Address and Email::Address::List perl modules have already
been addressed in their respective ports, while the third: HTML::Gumbo
is not currently in the ports at all. |
1.1_4
05 Mar 2019 15:00:54
|
0mp |
Document a slixmpp < 1.4.1 vulnerability
Reviewed by: krion, mat
Approved by: krion (mentor), mat (mentor)
MFH: 2019Q1 |
1.1_4
05 Mar 2019 10:23:44
|
mfechner |
Doucumented several www/gitlab-ce security vulnerabilities. |
1.1_4
05 Mar 2019 06:20:50
|
tobik |
Document www/py-gunicorn vulnerability |
1.1_4
04 Mar 2019 10:54:26
|
joneum |
Update mybb entry
Sponsored by: Netzkommune GmbH |
1.1_4
03 Mar 2019 00:03:11
|
bhughes |
security/vuxml: document Node.js February 2019 Security Releases
https://nodejs.org/en/blog/vulnerability/february-2019-security-releases/
Sponsored by: Miles AS |
1.1_4
02 Mar 2019 10:29:12
|
joneum |
Document vulnerability in www/mybb
Sponsored by: Netzkommune GmbH |
As an Amazon Associate I earn from qualifying purchases.
