Commit History - (may be incomplete: for full details, see links to repositories near top of page) Commit Credits Log message 1.1_1 marcus Update the latest firefox vulnerability ranges. 1.1_1 kuriyama Minor whitespace nits. 1.1_1 miwi - Update previous entry
* remove duplicate bid entry
* add more referens
* fix whitespaces 1.1_1 des Document Varnish 2.0 DoS.
PR: ports/131690
Submitted by: Mark Foster <mark@foster.cc> 1.1_1 miwi - Document tor -- multiple vulnerabilites 1.1_1 miwi - Fix portaudit conflict with www/firefox and www/firefox3
- Mark www/firefox and www/linux-firefox FORBIDDEN
Discussion by: simon/stas
With hat: secteam 1.1_1 miwi - Fix latest firefox entry 1.1_1 miwi - Document firefox -- multiple vulnerabilities 1.1_1 glarkin - document codeigniter -- arbitrary script execution in the new
Form Validationclass 1.1_1 jadawin - Document pyblosxom -- atom flavor multiple XML injection vulnerabilities
Reviewed by: miwi 1.1_1 miwi - Document typo3 -- cross-site scripting and information disclosure 1.1_1 miwi - Update latest squid* entry
Add CVE-2009-0478
Submitted by: jadawin 1.1_1 stas - Update ruby vuxml entries due to ruby19 version bump. 1.1_1 miwi - Document amaya -- multiple buffer overflow vulnerabilities
PR: based on 131508
Submitted by: Mark Foster <mark@foster.cc> 1.1_1 miwi - Document websvn -- multiple vulnerabilities
PR: based on 130934
Submitted by: Mark Foster <mark@foster.cc> 1.1_1 miwi - Document phplist -- local file inclusion vulnerability
PR: based on 130932 1.1_1 miwi - Document squid -- remote denial of service vulnerability
PR: based on 131431 1.1_1 miwi - Fix topic s/typo/typo3 1.1_1 miwi - Document typo3 -- Multiple Vulnerabilities 1.1_1 miwi - Fix previous entry 1.1_1 tmclaugh Security update for sudo to 1.6.9p20 for CVE 2009-0034
Changes:
- Only use the cached supplementory group vector when matching groups
for the invoking user. (security)
- When setting the umask, use the union of the user's umask and the
default value set in sudoers so that we never lower the user's umask
when running a command.
- Sudo now operates in the C locale again when doing a match against
sudoers.
PR: 131446
Submitted by: Eygene Ryabinkin
Security: vid:13d6d997-f455-11dd-8516-001b77d09812 1.1_1 miwi - Fix a typo (s/drual/drupal) 1.1_1 miwi - Cleanup 1.1_1 miwi - Document drupal -- multible vulnerabilities 1.1_1 ale Update php5-gd entry. 1.1_1 miwi - Document perl -- Directory Permissions Race Condition
PR: based on 129317 1.1_1 miwi - Rework ganglia entry
* Fix topic
* Fix discovery and entry day 1.1_1 miwi - Set modified for b9077cc4-6d04-4bcb-a37a-9ceaebfdcc9e entry
- more cleanup 1.1_1 miwi - Document moinmoin -- multiple cross site scripting vulnerabilities 1.1_1 miwi - Cleanup previous entry
* remove whitespaces
* sort bid/cvename/url 1.1_1 brooks Upgrade Ganglia to 3.1.1 plus a fix for CVE-2009-0241.
PR: ports/129822 , ports/131067
Submitted by: Mark Foster <mark at foster dot cc> (vuxml)
Security: vid:b9077cc4-6d04-4bcb-a37a-9ceaebfdcc9e 1.1_1 miwi - Document Tor -- Unspecified Memory Corruption Vulnerability 1.1_1 miwi - Cleanup
* Fix whitespaces/ Tabs
* Sort <bid>/<cvename>/<url> 1.1_1 miwi - Rewording 2ffb1b0d-ecf5-11dd-abae-00219b0fc4d (glpi -- SQL Injection)
- Add more reference sites 1.1_1 pgollucci Document glpi -- SQL Injection vulnerabilty
PR: ports/131011
Submitted by: Mathias Monnerville <mathias@monnerville.com> 1.1_1 tabthorpe - Document openfire -- multiple vulnerabilities
PR: ports/130606
Submitted by: Mark Foster <mark foster.cc> 1.1_1 delphij Update information about 9fff8dc8-7aa7-11da-bf72-00123f589060
and 651996e0-fe07-11d9-8329-000e0c2e438a, newer versions of
apache+ipv6 has the problems fixed.
Submitted by: sumikawa 1.1_1 wxs - Document two old ipsec-tools DoS
PR: ports/129468
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 wxs - Document directory traversal bug in teamspeak server
PR: ports/130608
Submitted by: Mark Foster <mark@foster.cc> 1.1_1 wxs - Document graphics/optipng buffer overflow
PR: ports/129072
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 wxs - Document old gitweb privilege escalation vulnerability.
PR: ports/130600
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 naddy Document vulnerability in older versions of GNU tar.
PR: 130602
Submitted by: Mark Foster <mark@foster.cc> 1.1_1 miwi - Mark net-mgmt/nagios2 as secure 1.1_1 miwi - Document mplayer -- vulnerability in STR files processor
PR: based on 130573 1.1_1 miwi - Cleanup previous entry
- Add more references 1.1_1 wxs - Add missing blockquote and linewrap properly 1.1_1 wxs - Document cgiwrap XSS vulnerability
PR: ports/130277
Submitted by: Eric W. Bates <ericx@vineyard.net> 1.1_1 miwi - Document nagios -- web interface privilege escalation vulnerability 1.1_1 miwi - Document pdfjam -- insecure temporary files
PR: based on 130028 1.1_1 miwi - Document verlihub -- insecure temporary file usage and arbitrary command
execution 1.1_1 miwi - Document mysql -- empty bit-string literal denial of service
PR: based on 129978
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Fix discovery date 1.1_1 miwi - Document mysql multiple vulnerabilities:
* mysql -- renaming of arbitrary tables by authenticated users
* mysql -- remote Denial of Service via malformed password packet
* mysql -- privilege escalation and overwrite of the system table
information
PR: based on 130025
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Document imap-uw -- imap c-client buffer overflow
PR: 130013
Submitted by: Mark Foster <mark@foster.cc>
Approved by: maintainer timeout 1.1_1 miwi - Fix a small typo 1.1_1 miwi - Document imap-uw -- local buffer overflow vulnerabilities
PR: 128923
Submitted by: Mark Foster <mark@foster.cc>
Approved by: maintainer timeout 1.1_1 miwi - Document libcdaudio -- remote buffer overflow and code execution 1.1_1 tabthorpe - Mark xterm 238 safe 1.1_1 remko Import latest FreeBSD-SA's so that we are up to date again. 1.1_1 stas - Document xterm vulnerability. 1.1_1 stas - Document PHP gd library vulnerability. 1.1_1 miwi - Update awstats entry (also affect www/awstats-devel) 1.1_1 chinsan - Fix the affected version of awstats 1.1_1 chinsan - Document awstats -- multiple XSS vulnerabilities
PR: ports/129957
Submitted by: Eygene Ryabinkin <rea-fbsd _at\ codelabs.ru>
Approved by: Alex Samorukov (maintainer)
Security: http://secunia.com/advisories/31519 1.1_1 miwi - Cleanup (fix whitespaces, typos) 1.1_1 chinsan - Completely fix CVE-2005-0448
PR: ports/129301
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 erwin Bump copyright year. 1.1_1 tabthorpe - Document vim -- multiple vulnerabilities in the netrw module
PR: ports/129137
Submitted by: Eygene Ryabinkin <rea-fbsd codelabs.ru> 1.1_1 mezz Add vinagre -- format string vulnerability entry.
PR: ports/129959
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 glarkin Document twiki - multiple vulnerabilities 1.1_1 ale Add entry for roundcube.
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Document mysql -- MyISAM table privileges security bypass vulnerability for
symlinked paths 1.1_1 miwi - Document mplayer -- twinvq processing buffer overflow vulnerability
Reported by: Thomas Zander <riggs@rrr.de> (mplayer maintainer) 1.1_1 jadawin - ampache -- insecure temporary file usage 1.1_1 miwi - Small cleanup for the last cups-base entry
* CVE-2008-5184 was fixed in 1.3.8.
* CVE-2008-1722 does not related to anything in this entry;
* PNG buffer overflow is really CVE-2008-5286.
Reported by: Eygene Ryabinkin <rea-fbsd@codelabs.ru>
No Cookies for: miwi 1.1_1 miwi - Document opera -- multiple vulnerabilities 1.1_1 miwi - Document mediawiki -- multiple vulnerabilities 1.1_1 miwi - Fix make validate 1.1_1 miwi - document drupal -- Multiple vulnerabilities 1.1_1 miwi - Document mozilla -- multiple vulnerabilities 1.1_1 miwi - Fix a small typo 1.1_1 miwi - Document phpmyadmin -- cross-site request forgery vulnerability 1.1_1 tabthorpe - Document php5 -- potential magic_quotes_gpc vulnerability
Reviewed by: miwi 1.1_1 miwi - Fix a typo
Reported by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Document wireshark -- SMTP Processing Denial of Service Vulnerability 1.1_1 miwi - Document php -- multiple vulnerabilities 1.1_1 miwi - Document mgetty+sendfax -- symlink attack via insecure temporary files
PR: based on 129471
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Document dovecot-managesieve -- Script Name Directory Traversal Vulnerability
PR: based on 129303
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi Document habari -- Cross-Site Scripting Vulnerability
PR: 129475
Submitted by: Ayumi M <ayu@dahlia.commun.jp> 1.1_1 miwi - Add 32545 to the latest vlc entry. 1.1_1 miwi - Document vlc -- arbitrary code execution in the RealMedia processor 1.1_1 miwi - S/secunia/Secunia 1.1_1 miwi - Document mantis - PHP Code Execution Vulnerability
PR: based on 129438
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi Document mantis -- multiple vulnerabilities
PR: based on 129438 1.1_1 miwi - Fix previous entry 1.1_1 tabthorpe - Document squirrelmail -- Cross site scripting vulnerability 1.1_1 miwi - Fix discovery from previous entry 1.1_1 miwi - Document openoffice -- arbitrary code execution vulnerabilities
PR: based on 129192
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> 1.1_1 miwi - Document wordpress -- Header RSS Feed Script Insertion Vulnerability 1.1_1 miwi - Document samba -- potential leakage of arbitrary memory contents
- Fix my previous entry
