Date: Tue, 12 Nov 2019 07:42:06 +0000 (UTC) From: Jochen Neumeister <joneum@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r517309 - head/security/vuxml Message-ID: <201911120742.xAC7g6uN018467@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: joneum Date: Tue Nov 12 07:42:05 2019 New Revision: 517309 URL: https://svnweb.freebsd.org/changeset/ports/517309 Log: Add entry for wordpress Sponsored by: Netzkommune GmbH Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Tue Nov 12 06:52:14 2019 (r517308) +++ head/security/vuxml/vuln.xml Tue Nov 12 07:42:05 2019 (r517309) @@ -58,6 +58,50 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="459df1ba-051c-11ea-9673-4c72b94353b5"> + <topic>wordpress -- multiple issues</topic> + <affects> + <package> + <name>wordpress</name> + <name>fr-wordpress</name> + <range><lt>5.2.4,1</lt></range> + </package> + <package> + <name>de-wordpress</name> + <name>zh_CN-wordpress</name> + <name>zh_TW-wordpress</name> + <name>ja-wordpress</name> + <name>ru-wordpress</name> + <range><lt>5.2.4</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>wordpress developers reports:</p> + <blockquote cite="https://wordpress.org/news/2019/10/wordpress-5-2-4-security-release/">; + <p>Props to Evan Ricafort for finding an issue where stored XSS (cross-site scripting) + could be added via the Customizer.</p> + <p>rops to J.D. Grimes who found and disclosed a method of viewing unauthenticated posts.</p> + <p>Props to Weston Ruter for finding a way to create a stored XSS to inject Javascript + into style tags.</p> + <p>rops to David Newman for highlighting a method to poison the cache of JSON GET requests + via the Vary: Origin header.</p> + <p>Props to Eugene Kolodenker who found a server-side request forgery in the way that URLs + are validated.</p> + <p>Props to Ben Bidner of the WordPress Security Team who discovered issues related to + referrer validation in the admin.</p> + </blockquote> + </body> + </description> + <references> + <url>https://wordpress.org/news/2019/10/wordpress-5-2-4-security-release/</url>; + </references> + <dates> + <discovery>2019-10-14</discovery> + <entry>2019-11-12</entry> + </dates> + </vuln> + <vuln vid="b2f9573a-008c-11ea-9801-10c37b4ac2ea"> <topic>nexus2-oss -- Multiple vulerabilities</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201911120742.xAC7g6uN018467>