Commit History - (may be incomplete: for full details, see links to repositories near top of page) Commit Credits Log message 1.1_1 miwi - Cleanup latest Wireshark entry 1.1_1 miwi - Bump modified date for zope entry 1.1_1 pav - zope-2.7.9_2 secure 1.1_1 marcus Add an entry for Wireshark less than or equal to 1.0.5 pertaining to
multiple DoS situations as described at
http://www.wireshark.org/security/wnpa-sec-2009-01.html .
PR: 131688
Submitted by: Mark Foster <mark@foster.cc> 1.1_1 miwi - Mark *seamonkey as safe 1.1_1 miwi - Add CVE's referenc to 78f5606b-f9d1-11dd-b79c-0030843d3802
PR: 132797
Submitted by: Mark Foster <mark@foster.cc> 1.1_1 miwi - Mark mail/*thunderbird as safe 1.1_1 miwi - Added more references to the netatalk 1.1_1 miwi - Small cleanup 1.1_1 miwi - Document netatalk -- arbitrary command execution in papd daemon
PR: based on 132427
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Fix discovery date from previous entry 1.1_1 miwi - Document gstreamer-plugins-good -- multiple memory overflows
PR: based on 132428 1.1_1 miwi - Document libsndfile -- CAF processing integer overflow vulnerability
PR: based on 132371 1.1_1 miwi - Fix roundcube entry
Pointy hat to: me 1.1_1 miwi - Document ffmpeg -- 4xm processing memory corruption vulnerability
PR: based on 132434
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Document roundcube -- webmail script insertion and php code injection
PR: based on 130968 1.1_1 miwi - Document proftpd -- multiple sql injection vulnerabilities
PR: based on 132369 1.1_1 miwi - Fix a typo 1.1_1 miwi - Document zappix -- php frontend multiple vulnerabilities
PR: based on 132315 1.1_1 miwi - Document php-mbstring -- php mbstring buffer overflow vulnerability
PR: based on 130603 1.1_1 miwi - Document phppgadmin -- directory traversal with register_globals enabled
PR: based on 132346 1.1_1 miwi - Document opera -- multiple vulnerabilities
PR: based on 132437 1.1_1 miwi - Clean up latest curl entry 1.1_1 tabthorpe - Document epiphany -- untrusted search path vulnerability 1.1_1 tabthorpe - Document apache -- Cross-site scripting vulnerability 1.1_1 amdmi3 - Document pngcrush -- libpng Uninitialised Pointer Arrays Vulnerability
Reviewed by: tabthorpe 1.1_1 roam Document the cURL redirection security bypass - CVE-2009-0037.
I'll update the ftp/curl port itself ASAP.
PR: 132299
Reported by: Mark Foster <mark@foster.cc> (the PR),
Daniel Bond <db@danielbond.org> (e-mail) 1.1_1 marcus Bump the modified date for the previous Firefox change.
Requested by: miwi 1.1_1 marcus Correct the Firefox 2.0 version for the recent Firefox vulnerabilities. 1.1_1 mnag - Add CVE entries for last lighttpd security issue.
Reported by: Eygene Ryabinkin <rea-fbsd___codelabs.ru> 1.1_1 glarkin - Update to 1.7.5
- Added UPDATING entry about incompatibility between 1.7.4 and 1.7.5
- Added vuln.xml entry for local file inclusion vulnerability in <1.7.5
- Added maintainer mode target in ZF Makefile to speed up fixups of
pkg-plist output from genplist
Security: cf495fd4-fdcd-11dd-9a86-0050568452ac
Security: http://framework.zend.com/issues/browse/ZF-5748
Security:
http://weierophinney.net/matthew/archives/206-Zend-Framework-1.7.5-Released-Important-Note-Regarding-Zend_View.html 1.1_1 jadawin - Document dia -- remote command execution vulnerability
Reviewed by: miwi 1.1_1 miwi - Document pycrypto -- ARC2 module buffer overflow
PR: based on 131689
Submitted by: Mark Foster <mark@foster.cc> 1.1_1 marcus Update the latest firefox vulnerability ranges. 1.1_1 kuriyama Minor whitespace nits. 1.1_1 miwi - Update previous entry
* remove duplicate bid entry
* add more referens
* fix whitespaces 1.1_1 des Document Varnish 2.0 DoS.
PR: ports/131690
Submitted by: Mark Foster <mark@foster.cc> 1.1_1 miwi - Document tor -- multiple vulnerabilites 1.1_1 miwi - Fix portaudit conflict with www/firefox and www/firefox3
- Mark www/firefox and www/linux-firefox FORBIDDEN
Discussion by: simon/stas
With hat: secteam 1.1_1 miwi - Fix latest firefox entry 1.1_1 miwi - Document firefox -- multiple vulnerabilities 1.1_1 glarkin - document codeigniter -- arbitrary script execution in the new
Form Validationclass 1.1_1 jadawin - Document pyblosxom -- atom flavor multiple XML injection vulnerabilities
Reviewed by: miwi 1.1_1 miwi - Document typo3 -- cross-site scripting and information disclosure 1.1_1 miwi - Update latest squid* entry
Add CVE-2009-0478
Submitted by: jadawin 1.1_1 stas - Update ruby vuxml entries due to ruby19 version bump. 1.1_1 miwi - Document amaya -- multiple buffer overflow vulnerabilities
PR: based on 131508
Submitted by: Mark Foster <mark@foster.cc> 1.1_1 miwi - Document websvn -- multiple vulnerabilities
PR: based on 130934
Submitted by: Mark Foster <mark@foster.cc> 1.1_1 miwi - Document phplist -- local file inclusion vulnerability
PR: based on 130932 1.1_1 miwi - Document squid -- remote denial of service vulnerability
PR: based on 131431 1.1_1 miwi - Fix topic s/typo/typo3 1.1_1 miwi - Document typo3 -- Multiple Vulnerabilities 1.1_1 miwi - Fix previous entry 1.1_1 tmclaugh Security update for sudo to 1.6.9p20 for CVE 2009-0034
Changes:
- Only use the cached supplementory group vector when matching groups
for the invoking user. (security)
- When setting the umask, use the union of the user's umask and the
default value set in sudoers so that we never lower the user's umask
when running a command.
- Sudo now operates in the C locale again when doing a match against
sudoers.
PR: 131446
Submitted by: Eygene Ryabinkin
Security: vid:13d6d997-f455-11dd-8516-001b77d09812 1.1_1 miwi - Fix a typo (s/drual/drupal) 1.1_1 miwi - Cleanup 1.1_1 miwi - Document drupal -- multible vulnerabilities 1.1_1 ale Update php5-gd entry. 1.1_1 miwi - Document perl -- Directory Permissions Race Condition
PR: based on 129317 1.1_1 miwi - Rework ganglia entry
* Fix topic
* Fix discovery and entry day 1.1_1 miwi - Set modified for b9077cc4-6d04-4bcb-a37a-9ceaebfdcc9e entry
- more cleanup 1.1_1 miwi - Document moinmoin -- multiple cross site scripting vulnerabilities 1.1_1 miwi - Cleanup previous entry
* remove whitespaces
* sort bid/cvename/url 1.1_1 brooks Upgrade Ganglia to 3.1.1 plus a fix for CVE-2009-0241.
PR: ports/129822 , ports/131067
Submitted by: Mark Foster <mark at foster dot cc> (vuxml)
Security: vid:b9077cc4-6d04-4bcb-a37a-9ceaebfdcc9e 1.1_1 miwi - Document Tor -- Unspecified Memory Corruption Vulnerability 1.1_1 miwi - Cleanup
* Fix whitespaces/ Tabs
* Sort <bid>/<cvename>/<url> 1.1_1 miwi - Rewording 2ffb1b0d-ecf5-11dd-abae-00219b0fc4d (glpi -- SQL Injection)
- Add more reference sites 1.1_1 pgollucci Document glpi -- SQL Injection vulnerabilty
PR: ports/131011
Submitted by: Mathias Monnerville <mathias@monnerville.com> 1.1_1 tabthorpe - Document openfire -- multiple vulnerabilities
PR: ports/130606
Submitted by: Mark Foster <mark foster.cc> 1.1_1 delphij Update information about 9fff8dc8-7aa7-11da-bf72-00123f589060
and 651996e0-fe07-11d9-8329-000e0c2e438a, newer versions of
apache+ipv6 has the problems fixed.
Submitted by: sumikawa 1.1_1 wxs - Document two old ipsec-tools DoS
PR: ports/129468
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 wxs - Document directory traversal bug in teamspeak server
PR: ports/130608
Submitted by: Mark Foster <mark@foster.cc> 1.1_1 wxs - Document graphics/optipng buffer overflow
PR: ports/129072
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 wxs - Document old gitweb privilege escalation vulnerability.
PR: ports/130600
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 naddy Document vulnerability in older versions of GNU tar.
PR: 130602
Submitted by: Mark Foster <mark@foster.cc> 1.1_1 miwi - Mark net-mgmt/nagios2 as secure 1.1_1 miwi - Document mplayer -- vulnerability in STR files processor
PR: based on 130573 1.1_1 miwi - Cleanup previous entry
- Add more references 1.1_1 wxs - Add missing blockquote and linewrap properly 1.1_1 wxs - Document cgiwrap XSS vulnerability
PR: ports/130277
Submitted by: Eric W. Bates <ericx@vineyard.net> 1.1_1 miwi - Document nagios -- web interface privilege escalation vulnerability 1.1_1 miwi - Document pdfjam -- insecure temporary files
PR: based on 130028 1.1_1 miwi - Document verlihub -- insecure temporary file usage and arbitrary command
execution 1.1_1 miwi - Document mysql -- empty bit-string literal denial of service
PR: based on 129978
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Fix discovery date 1.1_1 miwi - Document mysql multiple vulnerabilities:
* mysql -- renaming of arbitrary tables by authenticated users
* mysql -- remote Denial of Service via malformed password packet
* mysql -- privilege escalation and overwrite of the system table
information
PR: based on 130025
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Document imap-uw -- imap c-client buffer overflow
PR: 130013
Submitted by: Mark Foster <mark@foster.cc>
Approved by: maintainer timeout 1.1_1 miwi - Fix a small typo 1.1_1 miwi - Document imap-uw -- local buffer overflow vulnerabilities
PR: 128923
Submitted by: Mark Foster <mark@foster.cc>
Approved by: maintainer timeout 1.1_1 miwi - Document libcdaudio -- remote buffer overflow and code execution 1.1_1 tabthorpe - Mark xterm 238 safe 1.1_1 remko Import latest FreeBSD-SA's so that we are up to date again. 1.1_1 stas - Document xterm vulnerability. 1.1_1 stas - Document PHP gd library vulnerability. 1.1_1 miwi - Update awstats entry (also affect www/awstats-devel) 1.1_1 chinsan - Fix the affected version of awstats 1.1_1 chinsan - Document awstats -- multiple XSS vulnerabilities
PR: ports/129957
Submitted by: Eygene Ryabinkin <rea-fbsd _at\ codelabs.ru>
Approved by: Alex Samorukov (maintainer)
Security: http://secunia.com/advisories/31519 1.1_1 miwi - Cleanup (fix whitespaces, typos) 1.1_1 chinsan - Completely fix CVE-2005-0448
PR: ports/129301
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 erwin Bump copyright year.
