Commits · 8e10a866838673dd880fbc751546d32d307a512a · HardenedBSD / hardenedbsd-ports

26 Apr, 2019 1 commit
- security/vuxml: Add buildbot CRLF injection vulnerability · 8e10a866
  koobs authored Apr 26, 2019
  
  8e10a866
25 Apr, 2019 1 commit
- - Add drupal7 and drupal8 entries · d0d0f74f
  acm authored Apr 25, 2019
  
  d0d0f74f
24 Apr, 2019 2 commits
- add missed PORTEPOCH to libssh2 version · a4bfbd4a
  swills authored Apr 24, 2019
  
  a4bfbd4a
- Document py-yaml vulnerability · c180ce85
  jpaetzel authored Apr 24, 2019
```
PR:	237501
Submitted by:	sergey@akhmatov.ru
Security:	CVE-2017-18342
```
  c180ce85
23 Apr, 2019 5 commits

Document wpa_supplicant/hostapd EAP-pwd message reassembly issue with · 9a5a396f

cy authored Apr 23, 2019

unexpected fragment.

Security:	no CVE documented,
	https://w1.fi/security/2019-5/eap-pwd-message-reassembly-issue-\
	with-unexpected-fragment.txt

9a5a396f

Document wpa_supplicant/hostapd EAP-pwd missing commit validation. · 66af8865

cy authored Apr 23, 2019

CVE-2019-9497 (EAP-pwd server not checking for reflection attack)
CVE-2019-9498 (EAP-pwd server missing commit validation for
scalar/element)
CVE-2019-9499 (EAP-pwd peer missing commit validation for
scalar/element)

Security:	CVE-2019-9497, CVE-2019-9498, CVE-2019-9499,
	https://w1.fi/security/2019-4/eap-pwd-missing-commit-validation.txt

66af8865

Document hostapd SAE confirm missing state validation. · 35568775

cy authored Apr 23, 2019

CVE-2019-9496 (SAE confirm missing state validation in hostapd/AP)

Security:	CVE-2019-9496,
    https://w1.fi/security/2019-3/sae-confirm-missing-state-validation.txt

35568775

Document wpa_supplicant/hostapd EAP-pwd side-channel attack. · 2cff48b3

cy authored Apr 23, 2019

CVE-2019-9495 (cache attack against EAP-pwd)

Security:	CVE-2019-9495,
	https://w1.fi/security/2019-2/eap-pwd-side-channel-attack.txt

2cff48b3

Document wpa_supplicant/hostapd SAE side-channel attacks. · c05fa8a3

cy authored Apr 23, 2019

CVE-2019-9494 (cache attack against SAE)

Security:	CVE-2019-9494, VU#871675,
	https://w1.fi/security/2019-1/sae-side-channel-attacks.txt

c05fa8a3

22 Apr, 2019 1 commit
- - Document istio vulnerabilities. · 2a7bbe86
  danilo authored Apr 22, 2019
  
  2a7bbe86
21 Apr, 2019 1 commit
- Document Ghostscript CVE-2019-3835 and CVE-2019-3838. · a7874aed
  tijl authored Apr 21, 2019
```
PR:		237390
Security:	CVE-2019-3835, CVE-2019-3838
```
  a7874aed
19 Apr, 2019 1 commit
- Document GNUTLS-SA-2019-03-27. · f22e01f9
  tijl authored Apr 19, 2019
```
Security:	https://www.gnutls.org/security-new.html#GNUTLS-SA-2019-03-27
```
  f22e01f9
18 Apr, 2019 2 commits
- security/vuxml: Document dovecot json encoder issue · 787499c8
  ler authored Apr 18, 2019
  
  787499c8
- Document libssh2 issue · 49687360
  swills authored Apr 18, 2019
  
  49687360
17 Apr, 2019 1 commit
- Add entry for gitea · d21c66d5
  joneum authored Apr 17, 2019
```
PR:		237303
Sponsored by:	Netzkommune GmbH
```
  d21c66d5
13 Apr, 2019 1 commit
- security/vuxml: Document vulnerabilities for MySQL · 54b1f065
  brnrd authored Apr 13, 2019
```
 - Pre-notification by Oracle, final to be published in 3 days
```
  54b1f065
12 Apr, 2019 1 commit
- Document ftp/wget's metadata in extended attributes vulnerability · 9a04184d
  vd authored Apr 12, 2019
```
Security:	CVE-2018-20483
```
  9a04184d
11 Apr, 2019 1 commit
- Document gitlab vulnerability. · 406d7b6d
  mfechner authored Apr 11, 2019
  
  406d7b6d
10 Apr, 2019 2 commits
- Document Jenkins Security Advisory 2019-04-10 · 93689700
  lwhsu authored Apr 10, 2019
```
Sponsored by:	The FreeBSD Foundation
```
  93689700
- Document the latest Flash Player vulnerabilities. · 8670bdf6
  jkim authored Apr 10, 2019
```
https://helpx.adobe.com/security/products/flash-player/apsb19-19.html
```
  8670bdf6
06 Apr, 2019 1 commit
- Update py-notebook status · 6d3ae017
  sunpoet authored Apr 06, 2019
  
  6d3ae017
05 Apr, 2019 1 commit
- Documented vulnerabilities for clamav. · 6cee8b77
  mfechner authored Apr 05, 2019
  
  6cee8b77
03 Apr, 2019 1 commit

Update sysutils/puppetserver5 entry · b417bda2

romain authored Apr 03, 2019

Puppetlabs released version 5.3.8 of Puppet Server which address the issue:
https://puppet.com/docs/puppetserver/5.3/release_notes.html#puppet-server-538

With hat:	puppet

b417bda2

02 Apr, 2019 2 commits
- Documented gitlab vulnerability. · b12a282f
  mfechner authored Apr 02, 2019
  
  b12a282f
- security/vuxml: Document Apache httpd vulnerabilities · ab25f717
  brnrd authored Apr 02, 2019
  
  ab25f717
01 Apr, 2019 1 commit
- - Document sysutils/kubectl CVE-2019-1002101 · 57c31f5a
  danilo authored Apr 01, 2019
  
  57c31f5a
31 Mar, 2019 1 commit
- security/vuxml: Document irc/znc issue · 5910630a
  dbaio authored Mar 31, 2019
```
Security:	CVE-2019-9917
```
  5910630a
29 Mar, 2019 2 commits
- Document py-notebook vulnerability · ee394ba2
  sunpoet authored Mar 29, 2019
  
  ee394ba2
- Update openjpeg status · 0c80b13f
  sunpoet authored Mar 29, 2019
  
  0c80b13f
28 Mar, 2019 2 commits
- vuxml: Document mail/dovecot buffer overflow. · 66544735
  ler authored Mar 28, 2019
  
  66544735
- Add modified line for drupal after r496987 · 0bd20661
  joneum authored Mar 28, 2019
```
Sponsored by:	Netzkommune GmbH
```
  0bd20661
27 Mar, 2019 3 commits
- - Update 94d63fd7-508b-11e9-9ba0-4c72b94353b5 entry · f11619fc
  acm authored Mar 27, 2019
  
  f11619fc
- Update Python vulnerability (d74371d2-4fee-11e9-a5cd-1df8a848de3d) · 51a05766
  sunpoet authored Mar 27, 2019
  
  51a05766
- Add entry for www/drupal7 · 02e86e7d
  joneum authored Mar 27, 2019
```
Sponsored by:	Netzkommune GmbH
```
  02e86e7d
26 Mar, 2019 1 commit
- Document Python vulnerability · 885e3431
  sunpoet authored Mar 26, 2019
  
  885e3431
22 Mar, 2019 1 commit
- Update the libXdmcp entry to make it clearer. · ee81885c
  zeising authored Mar 22, 2019
  
  ee81885c
21 Mar, 2019 3 commits
- Add entry for wordpress · f8692c73
  joneum authored Mar 21, 2019
```
Sponsored by:	Netzkommune GmbH
```
  f8692c73
- Documented gitlab vulnerability. · 0c884f33
  mfechner authored Mar 21, 2019
  
  0c884f33
- Add entry for x11/libXdmcp vulnerabilty. · 2bf0acd3
  zeising authored Mar 21, 2019
```
Add entry for x11/libXdmcp vulnerabilty, insufficient entripy generating
session keys.  It is unknown if this actually affects FreeBSD.

Security:	CVE-2017-2625
```
  2bf0acd3
20 Mar, 2019 1 commit
- Documented security vulnerability for gitlab < 11.8.2. · 8a2342b3
  mfechner authored Mar 20, 2019
  
  8a2342b3