diff options
| author | nectar <nectar@FreeBSD.org> | 2004-09-18 23:42:01 +0800 |
|---|---|---|
| committer | nectar <nectar@FreeBSD.org> | 2004-09-18 23:42:01 +0800 |
| commit | 23949a184c20f7f6fcbea2b98657fb3b3fb53fca (patch) | |
| tree | 2eaaff2ebb494ff5697a8aa3597c2577ef4ac989 | |
| parent | ad733b65a35148194e3aa4502a48b1ecdf53f5f2 (diff) | |
| download | freebsd-ports-gnome-23949a184c20f7f6fcbea2b98657fb3b3fb53fca.tar.gz freebsd-ports-gnome-23949a184c20f7f6fcbea2b98657fb3b3fb53fca.tar.zst freebsd-ports-gnome-23949a184c20f7f6fcbea2b98657fb3b3fb53fca.zip | |
Note some fixes for XPM image decoding vulnerabilities.
Submitted by: lesi
Add references to Chris Evans's advisories while I'm at it.
Approved by: portmgr
| -rw-r--r-- | security/vuxml/vuln.xml | 20 |
1 files changed, 16 insertions, 4 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index e514aa634379..d26f5f394a69 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -61,11 +61,12 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. <cvename>CAN-2004-0782</cvename> <cvename>CAN-2004-0783</cvename> <cvename>CAN-2004-0788</cvename> + <url>http://scary.beasts.org/security/CESA-2004-005.txt</url> </references> <dates> <discovery>2004-09-15</discovery> <entry>2004-09-15</entry> - <modified>2004-09-16</modified> + <modified>2004-09-18</modified> </dates> </vuln> @@ -126,14 +127,23 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. <affects> <package> <name>agenda-snow-libs</name> - <name>libXpm</name> <name>mupad</name> - <name>XFree86-libraries</name> - <name>xorg-libraries</name> <name>xpm</name> <name>zh-cle_base</name> <range><ge>0</ge></range> </package> + <package> + <name>libXpm</name> + <range><lt>3.5.1_1</lt></range> + </package> + <package> + <name>XFree86-libraries</name> + <range><lt>4.4.0_1</lt></range> + </package> + <package> + <name>xorg-libraries</name> + <range><lt>6.7.0_2</lt></range> + </package> </affects> <description> <body xmlns="http://www.w3.org/1999/xhtml"> @@ -160,10 +170,12 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. <cvename>CAN-2004-0687</cvename> <cvename>CAN-2004-0688</cvename> <url>http://freedesktop.org/pipermail/xorg/2004-September/003172.html</url> + <url>http://scary.beasts.org/security/CESA-2004-003.txt</url> </references> <dates> <discovery>2004-09-15</discovery> <entry>2004-09-15</entry> + <modified>2004-09-18</modified> </dates> </vuln> |