diff options
| author | nox <nox@FreeBSD.org> | 2012-04-07 00:07:06 +0800 |
|---|---|---|
| committer | nox <nox@FreeBSD.org> | 2012-04-07 00:07:06 +0800 |
| commit | 0602c54d07e1e0fc9d9eca03070bd46fb9dc014f (patch) | |
| tree | 119c53c6d0808530fd47826f3487b1b494245892 /security | |
| parent | 2c590673d089d35b7ea5b0d8182a1974a970f127 (diff) | |
| download | freebsd-ports-gnome-0602c54d07e1e0fc9d9eca03070bd46fb9dc014f.tar.gz freebsd-ports-gnome-0602c54d07e1e0fc9d9eca03070bd46fb9dc014f.tar.zst freebsd-ports-gnome-0602c54d07e1e0fc9d9eca03070bd46fb9dc014f.zip | |
- Fix vulnerability CVE-2011-1429.
- Add a patch to the mutt pager that handles non-breaking space
characters (0xA0) in an UTF8 environment correctly.
- Bump PORTREVISION.
PR: ports/166659
Submitted by: Udo Schweigert <udo.schweigert@siemens.com> (maintainer)
Security: http://www.freebsd.org/ports/portaudit/49314321-7fd4-11e1-9582-001b2134ef46.html
Feature safe: yes
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 7c9ca9a62242..0079df628231 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -52,6 +52,36 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="49314321-7fd4-11e1-9582-001b2134ef46"> + <topic>mutt-devel -- failure to check SMTP TLS server certificate</topic> + <affects> + <package> + <name>mutt-devel</name> + <range><lt>1.5.21_4</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Dave B reports on Full Disclosure:</p> + <blockquote cite="http://seclists.org/fulldisclosure/2011/Mar/87"> + <p>It seems that mutt fails to check the validity of a SMTP + servers certificate during a TLS connection. [...] + This means that an attacker could potentially MITM a + mutt user connecting to their SMTP server even when the + user has forced a TLS connection.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2011-1429</cvename> + <url>http://seclists.org/fulldisclosure/2011/Mar/87</url> + </references> + <dates> + <discovery>2012-03-08</discovery> + <entry>2012-04-06</entry> + </dates> + </vuln> + <vuln vid="057130e6-7f61-11e1-8a43-00262d5ed8ee"> <topic>chromium -- multiple vulnerabilities</topic> <affects> |