Commit History - (may be incomplete: for full details, see links to repositories near top of page)
Commit Credits Log message
1.1_3 12 Jan 2017 08:15:29
mat
Fixup bind9-devel's version for last vuln.
Sponsored by: Absolight
1.1_3 12 Jan 2017 07:27:14
delphij
Document BIND multiple vulnerabilities.
1.1_3 11 Jan 2017 17:28:12
feld
Document FreeBSD-SA-17:01.openssh
1.1_3 11 Jan 2017 11:50:02
brnrd
security/vuxml: Fix version number of libressl-devel
1.1_3 11 Jan 2017 11:41:08
brnrd
security/vuxml: Document OpenSSL ECDSA P-256 vulnerability
- Affects libressl as well
Security: CVE-2016-7056
1.1_3 11 Jan 2017 02:21:58
junovitch
Document Flash vulnerabilities in Adobe Security Bulletin APSB17-02
Security: CVE-2017-2925
Security: CVE-2017-2926
Security: CVE-2017-2927
Security: CVE-2017-2928
Security: CVE-2017-2930
Security: CVE-2017-2931
Security: CVE-2017-2932
Security: CVE-2017-2933
Security: CVE-2017-2934
Security: CVE-2017-2935
Security: CVE-2017-2936
Security: CVE-2017-2937
Security: CVE-2017-2938
Security: https://vuxml.FreeBSD.org/freebsd/2a7bdc56-d7a3-11e6-ae1b-002590263bf5.html
1.1_3 10 Jan 2017 03:13:53
junovitch
Mention pcsc-lite CVE (it was in next message in cited URL)
While here, fix spacing
PR: 215834
1.1_3 09 Jan 2017 18:21:40
feld
Document moinmoin vulnerabilities
PR: 214937
Security: CVE-2016-7146 CVE-2016-7148 CVE-2016-9119
1.1_3 09 Jan 2017 18:12:34
sunpoet
Fix openssh-portable version
1.1_3 09 Jan 2017 17:37:48
feld
Document libvncserver vulnerabilities
PR: 215805
Security: CVE-2016-9941 CVE-2016-9942
1.1_3 09 Jan 2017 17:32:04
feld
Document libdwarf vulnerabilities
Security: CVE-2016-5027 CVE-2016-5028 CVE-2016-5029 CVE-2016-5030
Security: CVE-2016-5031 CVE-2016-5032 CVE-2016-5033 CVE-2016-5035
Security: CVE-2016-5037 CVE-2016-5040 CVE-2016-5041 CVE-2016-5043
Security: CVE-2016-5044 CVE-2016-7510 CVE-2016-7511 CVE-2016-8679
Security: CVE-2016-8680 CVE-2016-8681 CVE-2016-9275 CVE-2016-9276
Security: CVE-2016-9480 CVE-2016-9558
PR: 215085
1.1_3 09 Jan 2017 17:14:14
feld
Document lynx vulnerabilities
PR: 215464
Security: CVE-2014-3566
Security: CVE-2016-9179
1.1_3 09 Jan 2017 16:49:45
feld
Document hdf5 CVEs
PR: 214938
Security: CVE-2016-4330
SecuritY: CVE-2016-4331
Security: CVE-2016-4332
Security: CVE-2016-4333
1.1_3 09 Jan 2017 16:25:19
feld
Add additional EoL ports to vuxml
PR: 211975
1.1_3 09 Jan 2017 16:07:39
feld
Fix vuxml
CWE cannot be used in <cvename>
1.1_3 09 Jan 2017 14:24:49
lifanov
security/vuxml: document pcsc-lite vulnerabilities
PR: 215834
Submitted by: Mahdi Mokhtari <mokhi64@gmail.com> (maintainer)
Reviewed by: matthew
Approved by: matthew (mentor)
MFH: 2017Q1
1.1_3 09 Jan 2017 13:48:19
brnrd
security/vuxml: Document GnuTLS vulnerabilities
1.1_3 09 Jan 2017 07:56:16
nobutaka
Modify affected version of w3m entry accordingly since w3m port has been
updated to fixed version.
MFH: 2017Q1
1.1_3 07 Jan 2017 23:07:46
junovitch
Tag irssi entry with assigned CVEs, while here wrap at 80 and reference PR
PR: 215800
Security: CVE-2017-5193
Security: CVE-2017-5194
Security: CVE-2017-5195
Security: CVE-2017-5196
Security: https://vuxml.FreeBSD.org/freebsd/3d6be69b-d365-11e6-a071-001e67f15f5a.html
1.1_3 07 Jan 2017 22:55:03
junovitch
Document last quarter of Tomcat security advisories
Latest advisory is awaiting upstream release
PR: 214599
PR: 215865
Security: CVE-2016-0762
Security: CVE-2016-5018
Security: CVE-2016-6794
Security: CVE-2016-6796
Security: CVE-2016-6797
Security: CVE-2016-6816
Security: CVE-2016-8735
Security: CVE-2016-8745
Security: https://vuxml.FreeBSD.org/freebsd/0b9af110-d529-11e6-ae1b-002590263bf5.html
Security: https://vuxml.FreeBSD.org/freebsd/3ae106e2-d521-11e6-ae1b-002590263bf5.html
Security: https://vuxml.FreeBSD.org/freebsd/e5ec2767-d529-11e6-ae1b-002590263bf5.html
1.1_3 06 Jan 2017 03:43:55
vanilla
Document irc/irssi.
PR: 215801
Submitted by: Vladimir Krstulja <vlad-fbsd at acheronmedia.com>
1.1_3 06 Jan 2017 03:18:20
junovitch
Document security issues fixed in CodeIgniter 3.1.0 and 3.1.2
Note the security issue in CodeIgniter 3.1.1 is documented being valid on
PHP 5.3 only.
Security: https://vuxml.FreeBSD.org/freebsd/5e439ee7-d3bd-11e6-ae1b-002590263bf5.html
Security: https://vuxml.FreeBSD.org/freebsd/496160d3-d3be-11e6-ae1b-002590263bf5.html
1.1_3 04 Jan 2017 10:24:37
brnrd
security/vuxml: Update latest PHP 7 entry
- Vulnerable versions for all the referenced CVEs now known
1.1_3 02 Jan 2017 17:12:49
zi
- Document multiple vulnerabilities in w3m ports
PR: 215070
Submitted by: kcwu@csie.org
Security: eafa3aec-211b-4dd4-9b8a-a664a3f0917a
1.1_3 29 Dec 2016 19:29:11
brnrd
security/vuxml: Don't category prefix the <topic>
1.1_3 29 Dec 2016 19:16:03
brnrd
security/vuxml: Fix entry date on most recent commit
1.1_3 29 Dec 2016 13:08:32
brnrd
security/vuxml: Document h2o vulnerability
PR: 215587
Submitted by: Dave Cottlehuber <dch@skunkwerks.at> (maintainer)
1.1_3 29 Dec 2016 11:30:41
brnrd
security/vuxml: Document PHP 0-day vulnerabilities
- Two solved, not referenced in ChangeLog
1.1_3 29 Dec 2016 11:22:35
brnrd
security/vuxml: Document PHP vulnerabilities
- Vulnerabilities fixed in 7.0.14
1.1_3 29 Dec 2016 07:13:00
thierry
Adding tt-rss to the phpmailer's vulnerabilities.
1.1_3 28 Dec 2016 12:21:28
brnrd
security/vuxml: Document phpmailer vulnerability
- NB: This is not a duplicate
Security: c7656d4c-cb60-11e6-a9a5-b499baebfeaf
Security: CVE-2016-10045
1.1_3 27 Dec 2016 20:52:52
timur
Add entry for multiple samba 3.6.* - 4.4.* vulnerabilities.
Security: CVE-2016-2123
CVE-2016-2125
CVE-2016-2126
1.1_3 27 Dec 2016 16:07:24
pawel
Document devel/upnp 2 security vulnerabilities:
- unhandled write of files to filesystem via POST by default
- heap buffer overflow in create_url_list function
1.1_3 27 Dec 2016 10:33:55
bapt
Fix range for exim vulnerability
1.1_3 26 Dec 2016 11:57:38
brnrd
security/vuxml: Document phpmailer vulnerability
1.1_3 25 Dec 2016 14:13:29
vsevolod
- Document CVE-2016-9963 for exim
1.1_3 25 Dec 2016 10:28:52
brnrd
security/vuxml: Document OpenSSH vulnerabilities
1.1_3 24 Dec 2016 08:56:46
sunpoet
- Fix space/tab: it was not caught by 'make validate'
1.1_3 24 Dec 2016 08:38:12
sunpoet
- Document cURL vulnerability
1.1_3 23 Dec 2016 02:52:04
junovitch
Document information disclosure CVEs in SQUID-2016:10 and SQUID-2016:11
PR: 215416
PR: 215418
Security: CVE-2016-10002
Security: CVE-2016-10003
Security: https://vuxml.FreeBSD.org/freebsd/41f8af15-c8b9-11e6-ae1b-002590263bf5.html
1.1_3 23 Dec 2016 01:29:44
junovitch
Document command execution in vim/neovim via specially crafted files
Reported by: ohaur
Security: CVE-2016-1248
Security: https://vuxml.FreeBSD.org/freebsd/c11629d3-c8ad-11e6-ae1b-002590263bf5.html
1.1_3 22 Dec 2016 23:39:45
bapt
Add a entry about a XSS concerning www/pligg
1.1_3 22 Dec 2016 18:47:08
brnrd
security/vuxml: Add severity to recent Apache vulnerabilities
1.1_3 22 Dec 2016 17:50:21
feld
Document FreeBSD-SA-16:39.ntp
1.1_3 22 Dec 2016 08:05:36
brnrd
security/vuxml: Document cURL 7.51 vulnerability
1.1_3 22 Dec 2016 03:21:59
junovitch
Document Joomla! security advisories since 3.4.6 was released.
While here, update entry for 3.4.6 with final advisory information from
JSST page.
A big thanks to Larry Rosenman for reporting the open issues and getting the
port up to date.
PR: 215058
Reported by: Larry Rosenman <ler@lerctr.org>
Security: CVE-2016-8869
Security: CVE-2016-8870
Security: CVE-2016-9081
Security: CVE-2016-9836
Security: CVE-2016-9837
Security: CVE-2016-9838
Security: https://vuxml.FreeBSD.org/freebsd/624b45c0-c7f3-11e6-ae1b-002590263bf5.html
Security: https://vuxml.FreeBSD.org/freebsd/a27d234a-c7f2-11e6-ae1b-002590263bf5.html
Security: https://vuxml.FreeBSD.org/freebsd/c0ef061a-c7f0-11e6-ae1b-002590263bf5.html
Security: https://vuxml.FreeBSD.org/freebsd/f0806cad-c7f1-11e6-ae1b-002590263bf5.html
1.1_3 22 Dec 2016 02:11:05
junovitch
Document Xen Security Advisory (XSA 202)
Security: CVE-2016-10024
Security: https://vuxml.FreeBSD.org/freebsd/3ae078ca-c7eb-11e6-ae1b-002590263bf5.html
1.1_3 21 Dec 2016 10:35:21
ohauer
- document Apache httpd-2.4.x defects
1.1_3 20 Dec 2016 18:07:31
brnrd
security/vuxml: Mark openssl-devel not vulnerable to CVE-2016-2178
PR: 214995
Reported by: Melvyn Sopacua <m.r.sopacua@gmail.com>
1.1_3 20 Dec 2016 03:13:20
junovitch
Document Xen Security Advisory (XSA 204)
Reported by: royger
Security: CVE-2016-10013
Security: https://vuxml.FreeBSD.org/freebsd/942433db-c661-11e6-ae1b-002590263bf5.html
1.1_3 16 Dec 2016 08:33:08
jbeich
security/vuxml: oops, seamonkey 2.46 has CVE-2016-9079 fix
https://hg.mozilla.org/releases/mozilla-release/rev/8b8d2820718f
1.1_3 16 Dec 2016 02:14:29
junovitch
Document two CVEs fixed in Atheme 7.2.7
PR: 209217
Security: CVE-2014-9773
Security: CVE-2016-4478
Security: https://vuxml.FreeBSD.org/freebsd/e47ab5db-c333-11e6-ae1b-002590263bf5.html
1.1_3 14 Dec 2016 10:19:07
jbeich
security/vuxml: mark www/firefox < 50.1_1,1 as vulnerable
1.1_3 14 Dec 2016 03:12:28
junovitch
Update Roundcube entry with CVE and Bugtraq ID and switch to more detailed
Mitre verbiage.
PR: 214925
Security: CVE-2016-9920
Security: https://vuxml.FreeBSD.org/freebsd/125f5958-b611-11e6-a9a5-b499baebfeaf.html
1.1_3 14 Dec 2016 02:58:05
junovitch
Document Wordpress security issues in 4.6.1.
I didn't see any security updates in the 4.7 blog entry but we missed
capturing these fixes from 4.6.1 earlier.
Security: https://vuxml.FreeBSD.org/freebsd/54e50cd9-c1a8-11e6-ae1b-002590263bf5.html
1.1_3 14 Dec 2016 02:45:54
junovitch
Document Xen Security Advisory (XSA 200)
Reported by: royger
Security: CVE-2016-9932
Security: https://vuxml.FreeBSD.org/freebsd/80a897a2-c1a6-11e6-ae1b-002590263bf5.html
1.1_3 12 Dec 2016 20:23:58
brnrd
security/vuxml: Document PHP 7.0.13 & 5.6.29 vulnerabilities
- No further detail provided by the PHP project
1.1_3 09 Dec 2016 19:44:12
madpilot
Document vulnerabilities in net/asterisk11 and net/asterisk13.
1.1_3 08 Dec 2016 14:15:52
feld
Revise FreeBSD-SA-16:37.libc entry
1.1_3 07 Dec 2016 00:30:49
jhale
Document vulnerabilities in security/cryptopp
Security: CVE-2015-2141
Security: CVE-2016-3995
Security: CVE-2016-7420
1.1_3 06 Dec 2016 20:05:33
feld
Fix a couple <freebsdsa> that were meant to be <freebsdpr>
1.1_3 06 Dec 2016 20:03:52
feld
Document FreeBSD-SA-16:38.bhyve
Security: CVE-2016-1889
1.1_3 06 Dec 2016 19:56:37
feld
Document FreeBSD-SA-16:37.libc
Security: CVE-2016-6559
1.1_3 06 Dec 2016 19:55:52
feld
Document FreeBSD-SA-16:36.telnetd
Security: CVE-2016-1888
1.1_3 06 Dec 2016 10:04:09
brnrd
security/vuxml: Document Apache HTTP/2 vulnerability
Security: CVE-2016-8740
1.1_3 05 Dec 2016 20:21:12
rene
Document new vulnerabilities in www/chromium < 55.0.2883.75
Obtained
from: https://googlechromereleases.blogspot.nl/2016/12/stable-channel-update-for-desktop.html
1.1_3 04 Dec 2016 23:55:55
feld
Document ImageMagick7 vulnerabilities
PR: 214514
Security: CVE-2016-9298
Security: CVE-2016-8866
Security: CVE-2016-8862
1.1_3 04 Dec 2016 23:03:28
feld
Document py-pillow vulnerabilities
PR: 214410
Security: CVE-2016-9189
Security: CVE-2016-9190
1.1_3 04 Dec 2016 22:52:26
feld
Document ImageMagick vulnerability
PR: 214520
Security: CVE-2016-9298
1.1_3 04 Dec 2016 22:29:11
feld
Document py-cryptography vulnerability
PR: 214915
Security: CVE-2016-9243
1.1_3 04 Dec 2016 21:20:25
feld
Document qemu vulnerability
PR: 206725
Security: CVE-2015-1779
1.1_3 04 Dec 2016 19:35:14
junovitch
Document Xen Security Advisories (XSAs 185-188, 190-195, 197-198)
PR: 214936
Security: CVE-2016-7092
Security: CVE-2016-7093
Security: CVE-2016-7094
Security: CVE-2016-7154
Security: CVE-2016-7777
Security: CVE-2016-9379
Security: CVE-2016-9380
Security: CVE-2016-9381
Security: CVE-2016-9382
Security: CVE-2016-9383
Security: CVE-2016-9384
Security: CVE-2016-9385 (Only the first 15 lines of the commit message are shown above )
1.1_3 01 Dec 2016 16:46:44
marcus
Add an entry for wireshark < 2.2.2
PR: 214753
Submitted by: Piotr Kubaj <pkubaj@anongoth.pl>
1.1_3 01 Dec 2016 13:40:50
cmt
document mozilla vulnerabilities CVE-2016-9079
PR: 214978
Approved by: jbeich, rene (mentor, implicit)
1.1_3 30 Nov 2016 17:18:26
tijl
linux-c7-libgcrypt 1.5.3_1 fixes CVE-2016-6313.
1.1_3 30 Nov 2016 16:56:37
tijl
Fix a package name.
1.1_3 30 Nov 2016 16:51:18
tijl
Add linux-*-expat to CVE-2016-0718 entry.
PR: 214951
Security: https://rhn.redhat.com/errata/RHSA-2016-2824.html
1.1_3 30 Nov 2016 12:07:30
vd
Document ftp/wget's Access List Bypass / Race Condition vulnerability
PR: 214941
Submitted by: Sevan Janiyan <venture37@geeklan.co.uk>
Security: CVE-2016-7098
1.1_3 30 Nov 2016 10:48:56
rakuco
Add entry for CVE-2016-9296 in archivers/p7zip.
1.1_3 30 Nov 2016 03:33:45
cy
Document Apache Subverision vulnerability CVE-2016-8734:
Unrestricted XML entity expansion in mod_dontdothat and Subversion
clients using http(s)://
Reported by: Evgeny Kotkov <kotkov@apache.org>
Security: CVE-2016-8734
1.1_3 29 Nov 2016 22:58:53
junovitch
Document libwww vulnerabilities
PR: 214532
Submitted by: Danilo G. Baio <dbaio@bsd.com.br>
Security: CVE-2009-3720
Security: CVE-2009-3560
Security: CVE-2005-3183
Security: https://vuxml.FreeBSD.org/freebsd/18449f92-ab39-11e6-8011-005056925db4.html
1.1_3 29 Nov 2016 12:50:22
jbeich
security/vuxml: mark www/firefox < 50.0.1,1 as vulnerable
1.1_3 29 Nov 2016 08:55:55
brnrd
security/vuxml: Document Roundcube vulnerability
1.1_3 27 Nov 2016 03:25:52
junovitch
Remove trailing period in version and re-wrap Drupal entry at <=80 lines
PR: 214813
1.1_3 27 Nov 2016 03:07:49
junovitch
Revise earlier Moodle entry with released advisories (MSA-16-0023 - MSA-16-026)
Security: CVE-2016-8642
Security: CVE-2016-8643
Security: CVE-2016-8644
1.1_3 25 Nov 2016 10:11:38
tz
Document Drupal vulnerabilities
PR: 214813
Security: CVE-2016-9449
Security: CVE-2016-9450
Security: CVE-2016-9451
Security: CVE-2016-9452
Security:
https://vuxml.freebsd.org/freebsd/8db24888-b2f5-11e6-8153-00248c0c745d.html
Approved by: mentors (implicit)
1.1_3 25 Nov 2016 08:16:36
matthew
Document the latest batch of phpMyAdmin security advisories. All 14
of them.
1.1_3 24 Nov 2016 16:30:30
tijl
Add linux-c7-libgcrypt to CVE-2016-6313 entry.
Presumably a fix will be released with CentOS 7.3.
PR: 214460
Security: https://rhn.redhat.com/errata/RHSA-2016-2674.html
1.1_3 24 Nov 2016 16:08:28
feld
Document additional MySQL vulnerable versions
No information on which versions of MariaDB or Percona are affected.
PR: 212612
Security: CVE-2016-6662
1.1_3 24 Nov 2016 16:05:43
feld
Document MySQL RCE vulnerability
PR: 212612
Security: CVE-2016-6662
1.1_3 23 Nov 2016 11:05:05
tijl
Fix linux-*-nss range for CVE-2016-2834.
PR: 214755
Security: https://access.redhat.com/errata/RHSA-2016:2779
1.1_3 22 Nov 2016 08:19:25
delphij
Document multiple ntp vulnerabilities.
1.1_3 21 Nov 2016 16:04:32
amdmi3
- Document Teeworlds remote code execution
1.1_3 16 Nov 2016 18:26:03
swills
Document Jenkins Security Advisory 2016-11-16
1.1_3 16 Nov 2016 01:58:36
junovitch
Document Moodle security advisories from September (MSA-16-0022) and
November releases.
Security: CVE-2016-7038
1.1_3 15 Nov 2016 22:02:54
jbeich
security/vuxml: add entry for r425098, r425099, r425470
1.1_3 13 Nov 2016 11:11:02
tijl
Add linux-c6-libgcrypt to CVE-2016-6313 entry.
PR: 214460
Security: https://rhn.redhat.com/errata/RHSA-2016-2674.html
1.1_3 12 Nov 2016 20:51:11
pawel
Document multimedia/lives security issues
1.1_3 11 Nov 2016 23:49:29
brnrd
security/vuxml: Fix version number for OpenSSL 1.1.0c
Reported by: matthew
1.1_3 11 Nov 2016 10:22:36
cpm
- Fix affected chromium version.
Approved by: rene