Date: Thu, 30 Sep 2021 02:12:54 GMT From: Alex Kozlov <ak@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 74b07528d393 - main - security/vuxml: document archivers/ha vulnerabilities Message-ID: <202109300212.18U2CsGt005791@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by ak: URL: https://cgit.FreeBSD.org/ports/commit/?id=74b07528d3937bc3c267c0bbb55abda453c51665 commit 74b07528d3937bc3c267c0bbb55abda453c51665 Author: Alex Kozlov <ak@FreeBSD.org> AuthorDate: 2021-09-30 02:02:47 +0000 Commit: Alex Kozlov <ak@FreeBSD.org> CommitDate: 2021-09-30 02:02:47 +0000 security/vuxml: document archivers/ha vulnerabilities --- security/vuxml/vuln-2021.xml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/security/vuxml/vuln-2021.xml b/security/vuxml/vuln-2021.xml index fe47555b461f..76690fae5142 100644 --- a/security/vuxml/vuln-2021.xml +++ b/security/vuxml/vuln-2021.xml @@ -1,3 +1,30 @@ + <vuln vid="5436f9a2-2190-11ec-a90b-0cc47a49470e"> + <topic>ha -- Directory traversals</topic> + <affects> + <package> + <name>ha</name> + <range><lt>0.999b_2</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Alexander Cherepanov reports:</p> + <blockquote cite="http://www.openwall.com/lists/oss-security/2015/01/18/8">; + <p>Version 0.999b and older of ha archiver is susceptible to directory + traversal vulnerabilities via absolute and relative paths.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2015-1198</cvename> + <url>http://www.openwall.com/lists/oss-security/2015/01/18/8</url>; + </references> + <dates> + <discovery>2015-01-18</discovery> + <entry>2021-09-30</entry> + </dates> + </vuln> + <vuln vid="730e922f-20e7-11ec-a574-080027eedc6a"> <topic>nexus2-oss -- Apache ActiveMQ JMX vulnerability</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202109300212.18U2CsGt005791>