FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2025-02-20 09:44:03 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
a763a0e7-c3d9-11e5-b5fe-002590263bf5privoxy -- multiple vulnerabilities

Privoxy Developers reports:

Prevent invalid reads in case of corrupt chunk-encoded content. CVE-2016-1982. Bug discovered with afl-fuzz and AddressSanitizer.

Remove empty Host headers in client requests. Previously they would result in invalid reads. CVE-2016-1983. Bug discovered with afl-fuzz and AddressSanitizer.


Discovery 2016-01-22
Entry 2016-01-26
privoxy
< 3.0.24

CVE-2016-1982
CVE-2016-1983
ports/206504
http://www.privoxy.org/3.0.24/user-manual/whatsnew.html
http://www.openwall.com/lists/oss-security/2016/01/21/4
d9e1b569-c3d8-11e5-b5fe-002590263bf5privoxy -- multiple vulnerabilities

Privoxy Developers reports:

Fixed a DoS issue in case of client requests with incorrect chunk-encoded body. When compiled with assertions enabled (the default) they could previously cause Privoxy to abort(). Reported by Matthew Daley. CVE-2015-1380.

Fixed multiple segmentation faults and memory leaks in the pcrs code. This fix also increases the chances that an invalid pcrs command is rejected as such. Previously some invalid commands would be loaded without error. Note that Privoxy's pcrs sources (action and filter files) are considered trustworthy input and should not be writable by untrusted third-parties. CVE-2015-1381.

Fixed an 'invalid read' bug which could at least theoretically cause Privoxy to crash. So far, no crashes have been observed. CVE-2015-1382.


Discovery 2015-01-26
Entry 2016-01-26
privoxy
< 3.0.23

CVE-2015-1380
CVE-2015-1381
CVE-2015-1382
ports/197089
http://www.privoxy.org/3.0.23/user-manual/whatsnew.html
http://www.openwall.com/lists/oss-security/2015/01/26/4