Commit History - (may be incomplete: for full details, see links to repositories near top of page) Commit Credits Log message 1.1_1 miwi - Fix latest firefox entry.
Reported by: b.f <bf1793@gmail.com> 1.1_1 simon Document subversion -- heap overflow vulnerability. 1.1_1 simon Add a few CVE names to the 'squid -- several remote denial of service
vulnerabilities' entry. 1.1_1 simon Document bugzilla -- product name information leak. 1.1_1 miwi - Mark squid 3.1.0.12 as safe 1.1_1 miwi - Document mozilla -- multiple vulnerabilities 1.1_1 wxs - Add bind9-sdb-ldap and bind9-sdb-postgresql to recent BIND DoS.
Reviewed by: miwi 1.1_1 wxs - Document silc-client and silc-irssi-plugin format string vulnerability.
Reviewed by: miwi 1.1_1 thierry Mark mail/squirrelmail-multilogin-plugin as FORBIDDEN and add the
corresponding entry in VuXML.
Security: VuXML: 0d0237d0-7f68-11de-984d-0011098ad87f 1.1_1 wxs - White space fixes and correct the entry date in
vid 83725c91-7c7e-11de-9672-00e0815b8da8 1.1_1 wxs s/package/system/ for vid fbc8413f-2f7a-11de-9a3f-001b77d09812.
Reviewed by: remko
Approved by: secteam (remko) 1.1_1 wxs - Document BIND DoS in base and ports.
Reviewed by: remko
Approved by: secteam (remko) 1.1_1 miwi - Close tag 1.1_1 miwi - Document Mono XML Signature HMAC Truncation Spoofing 1.1_1 delphij Document squid remote denial of service vulnerabilities.
Submitted by: Thomas-Martin Seck <tmseck@web.de>
PR: ports/137184 1.1_1 jpaetzel Fix security advsory with patches from Ubuntu project.
http://vuxml.FreeBSD.org/c444c8b7-7169-11de-9ab7-000c29a67389.html
PR: ports/136891
Submitted by: wxs@
Reviewed by: simon@
Approved by: itetcu@ (mentor) 1.1_1 miwi - Fix a typo 1.1_1 miwi - Document firefox35 -- corrupt JIT state after deep return from native function 1.1_1 wxs - Document isc-dhcp*-client stack overflow. 1.1_1 wxs - Tweak nagios version information a bit for the command injection
vulnerability. Patches for net-mgmt/nagios and net-mgmt/nagios2 coming
shortly. 1.1_1 miwi - Document drupal -- multiple vulnerabilities
Submitted by: Nick Hilliard (based on) 1.1_1 beat - Mark linux-firefox 3.0.11 and higher as safe
Approved by: secteam (miwi) 1.1_1 wxs - Document remote command execution in net-mgmt/nfsen
PR: ports/136070
Submitted by: Bjoern Engels <engels@openit.de> 1.1_1 wxs - Add syslog-ng package to the list of vulnerable versions for the chroot
vulnerability. 1.1_1 wxs - Add newly created CVE for nagios command injection vulnerability.
- Add the other two nagios packages to the list.
- Add modified entry accordingly. 1.1_1 delphij Document phpMyAdmin XSS vulnerability 1.1_1 wxs - Document nagios command injection vulnerability. 1.1_1 wxs - s/secunia reports/Secnuia reports/
- Fix whitespace
Approved by: secteam (miwi) 1.1_1 wxs - Document tor-devel DNS resolution issue.
PR: ports/135925
Submitted by: bf <bf1783@gmail.com> 1.1_1 miwi - Document cscope -- multiple buffer overflows
PR: 135097
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Document cscope -- buffer overflow
PR: based on 135097
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Fix a typo from previous commit 1.1_1 skreuzer Document joomla -- multiple vulnerabilities
Approved by: wxs (mentor) 1.1_1 miwi - Document pidgin -- multiple vulnerabilities
PR: 135239 (based on)
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 wxs - Document git-daemon DoS. 1.1_1 stas - Fix the latest ruby entry: 1.9 branch is not vulnerable. 1.1_1 stas - Document ruby denial of sevice vulnerability in BigDecimal. 1.1_1 beat - Fix firefox3 version in da185955-5738-11de-b857-000f20797ede
Approved by: miwi (secteam) 1.1_1 beat - Document mozilla -- multiple vulnerabilities
Approved by: miwi (secteam) 1.1_1 miwi - Add some more cve to the previous entry 1.1_1 miwi - Fix previous entry 1.1_1 pgollucci Document DOS in apr-util xml(expat) processing
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 delphij Document dokuwiki local File Inclusion with register_globals on vulnerability. 1.1_1 miwi - Document openssl -- denial of service in DTLS implementation
PR: based on 134653
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Document eggdrop -- denial of service vulnerability 1.1_1 miwi - Document wireshark -- Denial of Service in the PCNFSD dissector
PR: 135061 (based on)
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Add more infos for libsndfile entry 1.1_1 miwi - Document libsndfile -- multiple vulnerabilities 1.1_1 miwi - Document slim -- local disclosure of X authority magic cookie 1.1_1 miwi - Cleanup previous entry 1.1_1 simon Unbreak file by removing double <vuxml> tag. 1.1_1 cy Add CVE information for NTP stack overflow.
PR: 134755
Submitted by: Mark Foster <mark@foster.cc>
Security: CVE-2009-0159 and CVE-2009-1252 1.1_1 miwi - Fix 5ed2f96b-33b7-4863-8c6b-540d22344424
* Remove duplicte url
* Fix safe version
* Bump modified date 1.1_1 miwi - Bump modified date for previous commit. 1.1_1 wxs - Add CVE information for nsd overflow.
- s/over flow/overflow/ for the same entry.
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> (private mail) 1.1_1 pav - Document imap-uw -- University of Washington IMAP c-client Remote Format
String Vulnerability (submitted back in Feb 2009)
PR: ports/131939
Submitted by: Mark Foster <mark@foster.cc> 1.1_1 wxs - Document dns/nsd and dns/nsd2 one-byte overflow (both are already fixed
in ports). Still need a CVE entry but there is not one assigned yet. 1.1_1 nobutaka Add entries of libxine vulnerabilities fixed in version 1.1.16.2 and 1.1.16.3.
PR: ports/132593
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Document php -- ini database truncation inside dba_replace() function
PR: 129459 (based on)
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Document libwmf -- embedded GD library Use-After-Free vulnerability
PR: based on 134246 1.1_1 miwi - Document libwmf -- Integer Overflow Vulnerability
PR: based on 134246 1.1_1 miwi - Document moinmoin -- cross-site scripting vulnerabilities 1.1_1 miwi - Rework previus entry 1.1_1 pgollucci - Document mod_perl -- cross site scripting in Apache::Status 1.1_1 miwi - Small cleanup
* fix spelling
* fix tabs/whitespaces
* add more references to the latest drual entry 1.1_1 miwi - Fix formating 1.1_1 delphij Document drupal -- cross-site scripting vulnerability.
Submitted by: Nick Hilliard <nick foobar org> 1.1_1 ume - Document cyrus-sasl -- buffer overflow vulnerability 1.1_1 miwi - Document moinmoin -- multiple cross site scripting vulnerabilities
PR: based on 134467 1.1_1 miwi - Document ghostscript8 -- Buffer Overflow Vulnerability
PR: 133331 (baesed on) 1.1_1 miwi - Cleanup 1.1_1 miwi - Added a referece to the latest pango entry
(4b172278-3f46-11de-becb-001cc0377035) 1.1_1 stas - Document pango buffer overflow vulnerability. 1.1_1 marcus Document the recent Wireshark vulnerabilities.
PR: 134245
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 wxs - Add CVE entry for quagga vulnerability.
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> (private mail) 1.1_1 dinoex - add CUPS 1.3.10
PR: 134247 1.1_1 dinoex - add SA-09:08.openssl
PR: 133156 1.1_1 wxs - Document quagga DoS.
PR: ports/134248
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru>
Reviewed by: miwi 1.1_1 beat - Mark flock 2.0 as safe
Approved by: miwi (mentor) 1.1_1 miwi - Cleanup previous entry 1.1_1 gahr - Document openfire -- Password Changes Security Bypass
PR: 134207
Submitted by: Mark Foster <mark@foster.cc> 1.1_1 miwi - Document drupal -- cross site scripting 1.1_1 stas - CVE-2007-3387 has been fixed in pdftohtml 0.39_3. 1.1_1 miwi - Document mozilla -- multiple vulnerabilities 1.1_1 marcus Document the recent poppler vulnerabilities fixed in 0.10.6.
PR: 133838
Submitted by: Mark Foster <mark@foster.cc>
Approved by: portmgr (implicit) 1.1_1 miwi - Rework previus entry (xpdf -- multiple vulnerabilities)
* fix typos
* added more information about security issues
* added more reference sites
Approved by: portmgr (secteam blanked) 1.1_1 araujo - Document xpdf -- multiple vulnerabilities
Approved by: portmgr (erwin) 1.1_1 miwi - Document freetype2 -- multiple vulnerabilities
Approved by: portmgr (secteam blanked) 1.1_1 wxs - Document ejabberd cross-site scripting vulnerability.
PR: ports/132800
Submitted by: Mark Foster <mark@foster.cc>
Reviewed by: miwi
Approved by: portmgr (secteam blanket, explicitly miwi) 1.1_1 miwi - Document ziproxy -- Multiple HTTP Proxy HTTP Host Header Incorrect Relay
Behavior Vulnerability
Approved by: portmgr (secteam blanked) 1.1_1 miwi - Document phpmyadmin -- insufficient output sanitizing when generating
configuration file
Approved by: portmgr (secteam blanked) 1.1_1 miwi - Document drupal6-cck -- cross-site scripting
PR: 133550
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Document pivot-weblog -- file deletion vulnerability 1.1_1 mat Fix the roundcube version of CVE-2009-0413, should be 0.2.1,1 and not 0.2.1.
Pointy Hat To: miwi 1.1_1 delphij Document phpmyadmin: insufficient output sanitizing when generating
configuration file. 1.1_1 miwi - Update 8e8b8b94-7f1d-11dd-a66a-0019666436c2 (www/rubygem-rails) now secure
- Bump modified day
Reported by: Mike Duchene 1.1_1 miwi - Fix daf045d7-b211-11dd-a987-000c29ca8953
- Fix discovery date
- Tell portaudit net-snmp is secure
Reported by: Oliver Brandmueller <ob@e-Gitt.NET> (via private mail)
Reviewed by: tabthorpe 1.1_1 miwi - Update zabbix entry is now secure 1.1_1 miwi - Fix spelling 1.1_1 miwi - Document amarok -- multiple vulnerabilitie
PR: based on 132938
