diff options
| author | eadler <eadler@FreeBSD.org> | 2012-04-22 07:43:57 +0800 |
|---|---|---|
| committer | eadler <eadler@FreeBSD.org> | 2012-04-22 07:43:57 +0800 |
| commit | 4e8f129c7ebeb1f0851283382296171ff56ecef1 (patch) | |
| tree | a3d003ed4a0ecb8a907294b47d3be23ea477c3cb /security | |
| parent | 5e199d4096d06e606e613d1448085e13a73fdf0b (diff) | |
| download | freebsd-ports-gnome-4e8f129c7ebeb1f0851283382296171ff56ecef1.tar.gz freebsd-ports-gnome-4e8f129c7ebeb1f0851283382296171ff56ecef1.tar.zst freebsd-ports-gnome-4e8f129c7ebeb1f0851283382296171ff56ecef1.zip | |
Inform users about the recent openssl vuln
Reviewed by: dinoex
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 0ced112433b9..188b7f5b9d19 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -52,6 +52,37 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="7184f92e-8bb8-11e1-8d7b-003067b2972c"> + <topic>OpenSSL -- integer conversions result in memory corruption</topic> + <affects> + <package> + <name>openssl</name> + <range><lt>1.0.1_1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>OpenSSL security team reports:</p> + <blockquote cite="http://www.openssl.org/news/secadv_20120419.txt"> + <p>A potentially exploitable vulnerability has been discovered in the OpenSSL + function asn1_d2i_read_bio. + Any application which uses BIO or FILE based functions to read untrusted DER + format data is vulnerable. Affected functions are of the form d2i_*_bio or + d2i_*_fp, for example d2i_X509_bio or d2i_PKCS12_fp.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2012-2110</cvename> + <mlist msgid="20120419103522.GN30784@cmpxchg8b.com">http://marc.info/?l=full-disclosure&m=133483221408243</mlist> + <url>http://www.openssl.org/news/secadv_20120419.txt</url> + </references> + <dates> + <discovery>2012-04-19</discovery> + <entry>2012-04-21</entry> + </dates> + </vuln> + <vuln vid="09c87973-8b9d-11e1-b393-20cf30e32f6d"> <topic>bugzilla -- multiple vulnerabilities</topic> <affects> |