Date: Tue, 30 Apr 2019 21:02:33 +0000 (UTC) From: Larry Rosenman <ler@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r500566 - head/security/vuxml Message-ID: <201904302102.x3UL2XsE095508@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: ler Date: Tue Apr 30 21:02:33 2019 New Revision: 500566 URL: https://svnweb.freebsd.org/changeset/ports/500566 Log: security/vuxml: document dovecot vulnerabilities Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Tue Apr 30 20:55:04 2019 (r500565) +++ head/security/vuxml/vuln.xml Tue Apr 30 21:02:33 2019 (r500566) @@ -58,6 +58,39 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="3f98ccb3-6b8a-11e9-9b5c-a4badb296695"> + <topic>Dovecot -- Multiple vulnerabilities</topic> + <affects> + <package> + <name>dovecot</name> + <range><lt>2.3.6</lt></range> + <range><ge>2.3.0</ge></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Aki Tuomi reports:</p> + <blockquote cite="https://dovecot.org/list/dovecot-news/2019-April/000409.html">; + <p>Submission-login crashes with signal 11 due to null pointer access when authentication is aborted by disconnecting. This can lead to denial-of-service attack by persistent attacker(s).</p> + </blockquote> + <p>Aki Tuomi reports:</p> + <blockquote cite="https://dovecot.org/list/dovecot-news/2019-April/000410.html">; + <p>Submission-login crashes when authentication is started over TLS secured channel and invalid authentication message is sent. This can lead to denial-of-service attack by persistent attacker(s).</p> + </blockquote> + </body> + </description> + <references> + <url>https://dovecot.org/list/dovecot-news/2019-April/000409.html</url>; + <cvename>CVE-2019-11494</cvename> + <url>https://dovecot.org/list/dovecot-news/2019-April/000410.html</url>; + <cvename>CVE-2019-11499</cvename> + </references> + <dates> + <discovery>2019-03-11</discovery> + <entry>2019-04-30</entry> + </dates> + </vuln> + <vuln vid="1138b39e-6abb-11e9-a685-001b217b3468"> <topic>Gitlab -- Multiple vulnerabilities</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201904302102.x3UL2XsE095508>