FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2025-01-30 04:04:33 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
5b6bc863-89dc-11ea-af8b-00155d0a0200ceph14 -- multiple security issues

RedHat reports:

ceph: secure mode of msgr2 breaks both confidentiality and integrity aspects for long-lived sessions.

ceph: header-splitting in RGW GetObject has a possible XSS.


Discovery 2020-04-07
Entry 2020-04-14
ceph14
> 14.1.1 lt 14.2.9

CVE-2020-1759
https://www.openwall.com/lists/oss-security/2020/04/07/2
CVE-2020-1760
https://www.openwall.com/lists/oss-security/2020/04/07/1
f20eb9a4-dfea-11ea-a9b8-9c5c8e84d621ceph14 -- HTTP header injection via CORS ExposeHeader tag

Red Hat bugzilla reports:

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made.


Discovery 2020-05-27
Entry 2020-08-16
ceph14
< 14.2.11

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10753
CVE-2020-10753
ports/248673