diff options
| author | rakuco <rakuco@FreeBSD.org> | 2017-03-12 05:42:07 +0800 |
|---|---|---|
| committer | rakuco <rakuco@FreeBSD.org> | 2017-03-12 05:42:07 +0800 |
| commit | 193bc856fdff763556adde2fd9a8ef5b6e22bcb5 (patch) | |
| tree | d842b8a1f0889a86555635145b76d10135b26125 /security/vuxml | |
| parent | 42f85c386e461f00b8b788d5d2bf898bdc1a5d8e (diff) | |
| download | freebsd-ports-gnome-193bc856fdff763556adde2fd9a8ef5b6e22bcb5.tar.gz freebsd-ports-gnome-193bc856fdff763556adde2fd9a8ef5b6e22bcb5.tar.zst freebsd-ports-gnome-193bc856fdff763556adde2fd9a8ef5b6e22bcb5.zip | |
Add entry for CVE-2016-7787 in x11/kde4-runtime.
Security announcement:
https://www.kde.org/info/security/advisory-20160621-1.txt
Diffstat (limited to 'security/vuxml')
| -rw-r--r-- | security/vuxml/vuln.xml | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 77e284e700ad..dc468ef5b442 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -58,6 +58,35 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="41fe4724-06a2-11e7-8e3e-5453ed2e2b49"> + <topic>kde-runtime -- kdesu: displayed command truncated by unicode string terminator</topic> + <affects> + <package> + <name>kde-runtime</name> + <range><lt>4.14.3_5</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Albert Aastals Cid reports:</p> + <blockquote cite="https://www.kde.org/info/security/advisory-20160930-1.txt"> + <p>A maliciously crafted command line for kdesu can result in the + user only seeing part of the commands that will actually get executed + as super user.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2016-7787</cvename> + <mlist>http://www.openwall.com/lists/oss-security/2016/09/29/7</mlist> + <url>https://www.kde.org/info/security/advisory-20160930-1.txt</url> + </references> + <dates> + <discovery>2016-09-30</discovery> + <entry>2017-03-11</entry> + </dates> + </vuln> + <vuln vid="e550fc62-069a-11e7-8e3e-5453ed2e2b49"> <topic>kdepimlibs -- directory traversal on KTNEF</topic> <affects> |