diff options
| author | swills <swills@FreeBSD.org> | 2013-10-29 02:48:22 +0800 |
|---|---|---|
| committer | swills <swills@FreeBSD.org> | 2013-10-29 02:48:22 +0800 |
| commit | 54fd12db0b3024ce4749f5ffd01243e380985a26 (patch) | |
| tree | b18100e94cd194ffc0d9e8180a8046d96d0b6680 /security | |
| parent | aeb181553373ef0f98bf8739dbd773e0299c561c (diff) | |
| download | freebsd-ports-gnome-54fd12db0b3024ce4749f5ffd01243e380985a26.tar.gz freebsd-ports-gnome-54fd12db0b3024ce4749f5ffd01243e380985a26.tar.zst freebsd-ports-gnome-54fd12db0b3024ce4749f5ffd01243e380985a26.zip | |
- Update www/mod_pagespeed to 1.2.24.2,1
- Document security issue in mod_pagespeed
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 98a870030df3..4a3ffdb86b87 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -51,6 +51,35 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="4e23644c-cb93-4f83-9e20-5bc07ad9b39f"> + <topic>mod_pagespeed -- critical cross-site scripting (XSS) vulnerability</topic> + <affects> + <package> + <name>mod_pagespeed</name> + <range><lt>1.2.24.2,1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>mod_pagespeed developers report:</p> + <blockquote cite="https://groups.google.com/forum/#!msg/mod-pagespeed-announce/oo015UHRxMc/JcAuf1hE8L8J"> + <p>Various versions of mod_pagespeed are subject to critical + cross-site scripting (XSS) vulnerability, CVE-2013-6111. This + permits a hostile third party to execute JavaScript in users' + browsers in context of the domain running mod_pagespeed, which + could permit theft of users' cookies or data on the site.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2013-6111</cvename> + </references> + <dates> + <discovery>2013-10-04</discovery> + <entry>2013-10-28</entry> + </dates> + </vuln> + <vuln vid="cd082cc6-1548-4b8d-a3aa-a007be611a29"> <cancelled/> </vuln> |