| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
1.1_3
09 Jan 2017 16:25:19
   |
feld  |
Add additional EoL ports to vuxml
PR: 211975 |
1.1_3
09 Jan 2017 16:07:39
|
feld |
Fix vuxml
CWE cannot be used in <cvename> |
1.1_3
09 Jan 2017 14:24:49
|
lifanov |
security/vuxml: document pcsc-lite vulnerabilities
PR: 215834
Submitted by: Mahdi Mokhtari <mokhi64@gmail.com> (maintainer)
Reviewed by: matthew
Approved by: matthew (mentor)
MFH: 2017Q1 |
1.1_3
09 Jan 2017 13:48:19
|
brnrd |
security/vuxml: Document GnuTLS vulnerabilities |
1.1_3
09 Jan 2017 07:56:16
|
nobutaka |
Modify affected version of w3m entry accordingly since w3m port has been
updated to fixed version.
MFH: 2017Q1 |
1.1_3
07 Jan 2017 23:07:46
|
junovitch |
Tag irssi entry with assigned CVEs, while here wrap at 80 and reference PR
PR: 215800
Security: CVE-2017-5193
Security: CVE-2017-5194
Security: CVE-2017-5195
Security: CVE-2017-5196
Security: https://vuxml.FreeBSD.org/freebsd/3d6be69b-d365-11e6-a071-001e67f15f5a.html |
1.1_3
07 Jan 2017 22:55:03
|
junovitch |
Document last quarter of Tomcat security advisories
Latest advisory is awaiting upstream release
PR: 214599
PR: 215865
Security: CVE-2016-0762
Security: CVE-2016-5018
Security: CVE-2016-6794
Security: CVE-2016-6796
Security: CVE-2016-6797
Security: CVE-2016-6816
Security: CVE-2016-8735
Security: CVE-2016-8745
Security: https://vuxml.FreeBSD.org/freebsd/0b9af110-d529-11e6-ae1b-002590263bf5.html
Security: https://vuxml.FreeBSD.org/freebsd/3ae106e2-d521-11e6-ae1b-002590263bf5.html
Security: https://vuxml.FreeBSD.org/freebsd/e5ec2767-d529-11e6-ae1b-002590263bf5.html |
1.1_3
06 Jan 2017 03:43:55
|
vanilla |
Document irc/irssi.
PR: 215801
Submitted by: Vladimir Krstulja <vlad-fbsd at acheronmedia.com> |
1.1_3
06 Jan 2017 03:18:20
|
junovitch |
Document security issues fixed in CodeIgniter 3.1.0 and 3.1.2
Note the security issue in CodeIgniter 3.1.1 is documented being valid on
PHP 5.3 only.
Security: https://vuxml.FreeBSD.org/freebsd/5e439ee7-d3bd-11e6-ae1b-002590263bf5.html
Security: https://vuxml.FreeBSD.org/freebsd/496160d3-d3be-11e6-ae1b-002590263bf5.html |
1.1_3
04 Jan 2017 10:24:37
|
brnrd |
security/vuxml: Update latest PHP 7 entry
- Vulnerable versions for all the referenced CVEs now known |
1.1_3
02 Jan 2017 17:12:49
|
zi |
- Document multiple vulnerabilities in w3m ports
PR: 215070
Submitted by: kcwu@csie.org
Security: eafa3aec-211b-4dd4-9b8a-a664a3f0917a |
1.1_3
29 Dec 2016 19:29:11
|
brnrd |
security/vuxml: Don't category prefix the <topic> |
1.1_3
29 Dec 2016 19:16:03
|
brnrd |
security/vuxml: Fix entry date on most recent commit |
1.1_3
29 Dec 2016 13:08:32
|
brnrd |
security/vuxml: Document h2o vulnerability
PR: 215587
Submitted by: Dave Cottlehuber <dch@skunkwerks.at> (maintainer) |
1.1_3
29 Dec 2016 11:30:41
|
brnrd |
security/vuxml: Document PHP 0-day vulnerabilities
- Two solved, not referenced in ChangeLog |
1.1_3
29 Dec 2016 11:22:35
|
brnrd |
security/vuxml: Document PHP vulnerabilities
- Vulnerabilities fixed in 7.0.14 |
1.1_3
29 Dec 2016 07:13:00
|
thierry |
Adding tt-rss to the phpmailer's vulnerabilities. |
1.1_3
28 Dec 2016 12:21:28
|
brnrd |
security/vuxml: Document phpmailer vulnerability
- NB: This is not a duplicate
Security: c7656d4c-cb60-11e6-a9a5-b499baebfeaf
Security: CVE-2016-10045 |
1.1_3
27 Dec 2016 20:52:52
|
timur |
Add entry for multiple samba 3.6.* - 4.4.* vulnerabilities.
Security: CVE-2016-2123
CVE-2016-2125
CVE-2016-2126 |
1.1_3
27 Dec 2016 16:07:24
|
pawel |
Document devel/upnp 2 security vulnerabilities:
- unhandled write of files to filesystem via POST by default
- heap buffer overflow in create_url_list function |
1.1_3
27 Dec 2016 10:33:55
|
bapt |
Fix range for exim vulnerability |
1.1_3
26 Dec 2016 11:57:38
|
brnrd |
security/vuxml: Document phpmailer vulnerability |
1.1_3
25 Dec 2016 14:13:29
|
vsevolod |
- Document CVE-2016-9963 for exim |
1.1_3
25 Dec 2016 10:28:52
|
brnrd |
security/vuxml: Document OpenSSH vulnerabilities |
1.1_3
24 Dec 2016 08:56:46
|
sunpoet |
- Fix space/tab: it was not caught by 'make validate' |
1.1_3
24 Dec 2016 08:38:12
|
sunpoet |
- Document cURL vulnerability |
1.1_3
23 Dec 2016 02:52:04
|
junovitch |
Document information disclosure CVEs in SQUID-2016:10 and SQUID-2016:11
PR: 215416
PR: 215418
Security: CVE-2016-10002
Security: CVE-2016-10003
Security: https://vuxml.FreeBSD.org/freebsd/41f8af15-c8b9-11e6-ae1b-002590263bf5.html |
1.1_3
23 Dec 2016 01:29:44
|
junovitch |
Document command execution in vim/neovim via specially crafted files
Reported by: ohaur
Security: CVE-2016-1248
Security: https://vuxml.FreeBSD.org/freebsd/c11629d3-c8ad-11e6-ae1b-002590263bf5.html |
1.1_3
22 Dec 2016 23:39:45
|
bapt |
Add a entry about a XSS concerning www/pligg |
1.1_3
22 Dec 2016 18:47:08
|
brnrd |
security/vuxml: Add severity to recent Apache vulnerabilities |
1.1_3
22 Dec 2016 17:50:21
|
feld |
Document FreeBSD-SA-16:39.ntp |
1.1_3
22 Dec 2016 08:05:36
|
brnrd |
security/vuxml: Document cURL 7.51 vulnerability |
1.1_3
22 Dec 2016 03:21:59
|
junovitch |
Document Joomla! security advisories since 3.4.6 was released.
While here, update entry for 3.4.6 with final advisory information from
JSST page.
A big thanks to Larry Rosenman for reporting the open issues and getting the
port up to date.
PR: 215058
Reported by: Larry Rosenman <ler@lerctr.org>
Security: CVE-2016-8869
Security: CVE-2016-8870
Security: CVE-2016-9081
Security: CVE-2016-9836
Security: CVE-2016-9837
Security: CVE-2016-9838
Security: https://vuxml.FreeBSD.org/freebsd/624b45c0-c7f3-11e6-ae1b-002590263bf5.html
Security: https://vuxml.FreeBSD.org/freebsd/a27d234a-c7f2-11e6-ae1b-002590263bf5.html
Security: https://vuxml.FreeBSD.org/freebsd/c0ef061a-c7f0-11e6-ae1b-002590263bf5.html
Security: https://vuxml.FreeBSD.org/freebsd/f0806cad-c7f1-11e6-ae1b-002590263bf5.html |
1.1_3
22 Dec 2016 02:11:05
|
junovitch |
Document Xen Security Advisory (XSA 202)
Security: CVE-2016-10024
Security: https://vuxml.FreeBSD.org/freebsd/3ae078ca-c7eb-11e6-ae1b-002590263bf5.html |
1.1_3
21 Dec 2016 10:35:21
|
ohauer |
- document Apache httpd-2.4.x defects |
1.1_3
20 Dec 2016 18:07:31
|
brnrd |
security/vuxml: Mark openssl-devel not vulnerable to CVE-2016-2178
PR: 214995
Reported by: Melvyn Sopacua <m.r.sopacua@gmail.com> |
1.1_3
20 Dec 2016 03:13:20
|
junovitch |
Document Xen Security Advisory (XSA 204)
Reported by: royger
Security: CVE-2016-10013
Security: https://vuxml.FreeBSD.org/freebsd/942433db-c661-11e6-ae1b-002590263bf5.html |
1.1_3
16 Dec 2016 08:33:08
|
jbeich |
security/vuxml: oops, seamonkey 2.46 has CVE-2016-9079 fix
https://hg.mozilla.org/releases/mozilla-release/rev/8b8d2820718f |
1.1_3
16 Dec 2016 02:14:29
|
junovitch |
Document two CVEs fixed in Atheme 7.2.7
PR: 209217
Security: CVE-2014-9773
Security: CVE-2016-4478
Security: https://vuxml.FreeBSD.org/freebsd/e47ab5db-c333-11e6-ae1b-002590263bf5.html |
1.1_3
14 Dec 2016 10:19:07
|
jbeich |
security/vuxml: mark www/firefox < 50.1_1,1 as vulnerable |
1.1_3
14 Dec 2016 03:12:28
|
junovitch |
Update Roundcube entry with CVE and Bugtraq ID and switch to more detailed
Mitre verbiage.
PR: 214925
Security: CVE-2016-9920
Security: https://vuxml.FreeBSD.org/freebsd/125f5958-b611-11e6-a9a5-b499baebfeaf.html |
1.1_3
14 Dec 2016 02:58:05
|
junovitch |
Document Wordpress security issues in 4.6.1.
I didn't see any security updates in the 4.7 blog entry but we missed
capturing these fixes from 4.6.1 earlier.
Security: https://vuxml.FreeBSD.org/freebsd/54e50cd9-c1a8-11e6-ae1b-002590263bf5.html |
1.1_3
14 Dec 2016 02:45:54
|
junovitch |
Document Xen Security Advisory (XSA 200)
Reported by: royger
Security: CVE-2016-9932
Security: https://vuxml.FreeBSD.org/freebsd/80a897a2-c1a6-11e6-ae1b-002590263bf5.html |
1.1_3
12 Dec 2016 20:23:58
|
brnrd |
security/vuxml: Document PHP 7.0.13 & 5.6.29 vulnerabilities
- No further detail provided by the PHP project |
1.1_3
09 Dec 2016 19:44:12
|
madpilot |
Document vulnerabilities in net/asterisk11 and net/asterisk13. |
1.1_3
08 Dec 2016 14:15:52
|
feld |
Revise FreeBSD-SA-16:37.libc entry |
1.1_3
07 Dec 2016 00:30:49
|
jhale |
Document vulnerabilities in security/cryptopp
Security: CVE-2015-2141
Security: CVE-2016-3995
Security: CVE-2016-7420 |
1.1_3
06 Dec 2016 20:05:33
|
feld |
Fix a couple <freebsdsa> that were meant to be <freebsdpr> |
1.1_3
06 Dec 2016 20:03:52
|
feld |
Document FreeBSD-SA-16:38.bhyve
Security: CVE-2016-1889 |
1.1_3
06 Dec 2016 19:56:37
|
feld |
Document FreeBSD-SA-16:37.libc
Security: CVE-2016-6559 |
1.1_3
06 Dec 2016 19:55:52
|
feld |
Document FreeBSD-SA-16:36.telnetd
Security: CVE-2016-1888 |
1.1_3
06 Dec 2016 10:04:09
|
brnrd |
security/vuxml: Document Apache HTTP/2 vulnerability
Security: CVE-2016-8740 |
1.1_3
05 Dec 2016 20:21:12
|
rene |
Document new vulnerabilities in www/chromium < 55.0.2883.75
Obtained
from: https://googlechromereleases.blogspot.nl/2016/12/stable-channel-update-for-desktop.html |
1.1_3
04 Dec 2016 23:55:55
|
feld |
Document ImageMagick7 vulnerabilities
PR: 214514
Security: CVE-2016-9298
Security: CVE-2016-8866
Security: CVE-2016-8862 |
1.1_3
04 Dec 2016 23:03:28
|
feld |
Document py-pillow vulnerabilities
PR: 214410
Security: CVE-2016-9189
Security: CVE-2016-9190 |
1.1_3
04 Dec 2016 22:52:26
|
feld |
Document ImageMagick vulnerability
PR: 214520
Security: CVE-2016-9298 |
1.1_3
04 Dec 2016 22:29:11
|
feld |
Document py-cryptography vulnerability
PR: 214915
Security: CVE-2016-9243 |
1.1_3
04 Dec 2016 21:20:25
|
feld |
Document qemu vulnerability
PR: 206725
Security: CVE-2015-1779 |
1.1_3
04 Dec 2016 19:35:14
|
junovitch |
Document Xen Security Advisories (XSAs 185-188, 190-195, 197-198)
PR: 214936
Security: CVE-2016-7092
Security: CVE-2016-7093
Security: CVE-2016-7094
Security: CVE-2016-7154
Security: CVE-2016-7777
Security: CVE-2016-9379
Security: CVE-2016-9380
Security: CVE-2016-9381
Security: CVE-2016-9382
Security: CVE-2016-9383
Security: CVE-2016-9384
Security: CVE-2016-9385 (Only the first 15 lines of the commit message are shown above  ) |
1.1_3
01 Dec 2016 16:46:44
|
marcus |
Add an entry for wireshark < 2.2.2
PR: 214753
Submitted by: Piotr Kubaj <pkubaj@anongoth.pl> |
1.1_3
01 Dec 2016 13:40:50
|
cmt |
document mozilla vulnerabilities CVE-2016-9079
PR: 214978
Approved by: jbeich, rene (mentor, implicit) |
1.1_3
30 Nov 2016 17:18:26
|
tijl |
linux-c7-libgcrypt 1.5.3_1 fixes CVE-2016-6313. |
1.1_3
30 Nov 2016 16:56:37
|
tijl |
Fix a package name. |
1.1_3
30 Nov 2016 16:51:18
|
tijl |
Add linux-*-expat to CVE-2016-0718 entry.
PR: 214951
Security: https://rhn.redhat.com/errata/RHSA-2016-2824.html |
1.1_3
30 Nov 2016 12:07:30
|
vd |
Document ftp/wget's Access List Bypass / Race Condition vulnerability
PR: 214941
Submitted by: Sevan Janiyan <venture37@geeklan.co.uk>
Security: CVE-2016-7098 |
1.1_3
30 Nov 2016 10:48:56
|
rakuco |
Add entry for CVE-2016-9296 in archivers/p7zip. |
1.1_3
30 Nov 2016 03:33:45
|
cy |
Document Apache Subverision vulnerability CVE-2016-8734:
Unrestricted XML entity expansion in mod_dontdothat and Subversion
clients using http(s)://
Reported by: Evgeny Kotkov <kotkov@apache.org>
Security: CVE-2016-8734 |
1.1_3
29 Nov 2016 22:58:53
|
junovitch |
Document libwww vulnerabilities
PR: 214532
Submitted by: Danilo G. Baio <dbaio@bsd.com.br>
Security: CVE-2009-3720
Security: CVE-2009-3560
Security: CVE-2005-3183
Security: https://vuxml.FreeBSD.org/freebsd/18449f92-ab39-11e6-8011-005056925db4.html |
1.1_3
29 Nov 2016 12:50:22
|
jbeich |
security/vuxml: mark www/firefox < 50.0.1,1 as vulnerable |
1.1_3
29 Nov 2016 08:55:55
|
brnrd |
security/vuxml: Document Roundcube vulnerability |
1.1_3
27 Nov 2016 03:25:52
|
junovitch |
Remove trailing period in version and re-wrap Drupal entry at <=80 lines
PR: 214813 |
1.1_3
27 Nov 2016 03:07:49
|
junovitch |
Revise earlier Moodle entry with released advisories (MSA-16-0023 - MSA-16-026)
Security: CVE-2016-8642
Security: CVE-2016-8643
Security: CVE-2016-8644 |
1.1_3
25 Nov 2016 10:11:38
|
tz |
Document Drupal vulnerabilities
PR: 214813
Security: CVE-2016-9449
Security: CVE-2016-9450
Security: CVE-2016-9451
Security: CVE-2016-9452
Security:
https://vuxml.freebsd.org/freebsd/8db24888-b2f5-11e6-8153-00248c0c745d.html
Approved by: mentors (implicit) |
1.1_3
25 Nov 2016 08:16:36
|
matthew |
Document the latest batch of phpMyAdmin security advisories. All 14
of them. |
1.1_3
24 Nov 2016 16:30:30
|
tijl |
Add linux-c7-libgcrypt to CVE-2016-6313 entry.
Presumably a fix will be released with CentOS 7.3.
PR: 214460
Security: https://rhn.redhat.com/errata/RHSA-2016-2674.html |
1.1_3
24 Nov 2016 16:08:28
|
feld |
Document additional MySQL vulnerable versions
No information on which versions of MariaDB or Percona are affected.
PR: 212612
Security: CVE-2016-6662 |
1.1_3
24 Nov 2016 16:05:43
|
feld |
Document MySQL RCE vulnerability
PR: 212612
Security: CVE-2016-6662 |
1.1_3
23 Nov 2016 11:05:05
|
tijl |
Fix linux-*-nss range for CVE-2016-2834.
PR: 214755
Security: https://access.redhat.com/errata/RHSA-2016:2779 |
1.1_3
22 Nov 2016 08:19:25
|
delphij |
Document multiple ntp vulnerabilities. |
1.1_3
21 Nov 2016 16:04:32
|
amdmi3 |
- Document Teeworlds remote code execution |
1.1_3
16 Nov 2016 18:26:03
|
swills |
Document Jenkins Security Advisory 2016-11-16 |
1.1_3
16 Nov 2016 01:58:36
|
junovitch |
Document Moodle security advisories from September (MSA-16-0022) and
November releases.
Security: CVE-2016-7038 |
1.1_3
15 Nov 2016 22:02:54
|
jbeich |
security/vuxml: add entry for r425098, r425099, r425470 |
1.1_3
13 Nov 2016 11:11:02
|
tijl |
Add linux-c6-libgcrypt to CVE-2016-6313 entry.
PR: 214460
Security: https://rhn.redhat.com/errata/RHSA-2016-2674.html |
1.1_3
12 Nov 2016 20:51:11
|
pawel |
Document multimedia/lives security issues |
1.1_3
11 Nov 2016 23:49:29
|
brnrd |
security/vuxml: Fix version number for OpenSSL 1.1.0c
Reported by: matthew |
1.1_3
11 Nov 2016 10:22:36
|
cpm |
- Fix affected chromium version.
Approved by: rene |
1.1_3
10 Nov 2016 19:23:53
|
brnrd |
security/vuxml: Document new OpenSSL 1.1.0 vulnerabilities |
1.1_3
10 Nov 2016 11:55:24
|
cpm |
Document new vulnerabilities in www/chromium < 54.0.2840.98
Approved by: rene
Obtained
from: https://googlechromereleases.blogspot.nl/2016/11/stable-channel-update-for-desktop_9.html |
1.1_3
10 Nov 2016 10:48:57
|
tijl |
Document latest flash plugin vulnerabilities.
Security: https://helpx.adobe.com/security/products/flash-player/apsb16-37.html |
1.1_3
09 Nov 2016 16:24:22
|
feld |
Document gitlab vulnerability
PR: 214360
Security: CVE-2016-9086 |
1.1_3
06 Nov 2016 13:34:17
|
tijl |
Undocument linux-*-expat vulnerabilities.
linux-*-expat is only used by linux-*-fontconfig to read configuration
files written in XML and by dbus-binding-tool(1) from linux-*-dbus-glib, a
development tool that generates C code from an Introspection XML file to
expose a GObject via D-Bus.
These vulnerabilities are therefore not believed to be exploitable on
FreeBSD and only cause annoying warnings and prevent installation of
linux-*-expat. It also does not look like Red Hat will provide fixes for
these any time soon.
PR: 210155 |
1.1_3
03 Nov 2016 20:34:34
|
rene |
Fix version number in last entry |
1.1_3
03 Nov 2016 20:33:43
|
rene |
Document new vulnerability in www/chromium < 54.0.2840.90
Obtained
from: https://googlechromereleases.blogspot.nl/2016/11/stable-channel-update-for-desktop.html |
1.1_3
02 Nov 2016 17:28:34
|
brnrd |
security/vuxml: Mark correct OpenSSL 1.0.2 and 1.1.0 versions
- "BTW, the issue has been fixed in the official release on September 22nd." |
1.1_3
02 Nov 2016 16:33:01
|
lwhsu |
Fix affected ports versions |
1.1_3
02 Nov 2016 13:26:34
|
feld |
Update openssh vuxml entry to add FreeBSD SA information
Security: CVE-2016-8858
Security: SA-16:33.openssh |
1.1_3
02 Nov 2016 13:19:28
|
feld |
Document openssl vulnerability
Security: CVE-2016-8610 |
1.1_3
02 Nov 2016 12:53:29
|
lwhsu |
Spelling fix |
1.1_3
02 Nov 2016 12:49:18
|
lwhsu |
Document Django vulnerabilities CVE-2016-9013, CVE-2016-9014 |
As an Amazon Associate I earn from qualifying purchases.
