diff options
| author | ohauer <ohauer@FreeBSD.org> | 2012-07-28 05:34:04 +0800 |
|---|---|---|
| committer | ohauer <ohauer@FreeBSD.org> | 2012-07-28 05:34:04 +0800 |
| commit | b0d3e1d8962aa7d3b6e708bd3468123fc96646b8 (patch) | |
| tree | ca6bd165c0c99be0a21f720e5c784dd3000085b3 /security | |
| parent | b8e9b069fbb56d01330def155a8f8d99ce61c3df (diff) | |
| download | freebsd-ports-gnome-b0d3e1d8962aa7d3b6e708bd3468123fc96646b8.tar.gz freebsd-ports-gnome-b0d3e1d8962aa7d3b6e708bd3468123fc96646b8.tar.zst freebsd-ports-gnome-b0d3e1d8962aa7d3b6e708bd3468123fc96646b8.zip | |
- security update bugzilla
new Versions: 3.6.10, 4.0.7, 4.2.2
4.2.2
This release fixes two security issues. See the Security Advisory for details.
In addition, the following important fixes/changes have been made in this release:
o A regression introduced in Bugzilla 4.0 caused some login names to be ignored
when entered in the CC list of bugs. (Bug 756314)
o Some queries could trigger an invalid SQL query if strings entered by the user
contained leading or trailing whitespaces. (Bug 760075)
o The auto-completion form for keywords no longer automatically selects the
first keyword in the list when the field is empty. (Bug 764517)
o A regression in Bugzilla 4.2 prevented classifications from being used in
graphical and tabular reports in the "Multiple Tables" field. (Bug 753688)
o Attachments created by the email_in.pl script were associated to the wrong
comment. (Bug 762785)
o Very long dependency lists can now be viewed correctly. (Bug 762783)
o Keywords are now correctly escaped in the auto-completion form to prevent any
XSS abuse. (Bug 754561)
o A regression introduced in Bugzilla 4.0rc2 when fixing CVE-2011-0046 caused
the "Un-forget the search" link to not work correctly anymore when restoring a
deleted saved search, because this link was lacking a valid token. (Bug 768870)
o Two minor CSRF vulnerabilities have been fixed which could let an attacker
alter your default search criteria in the Advanced Search page. (Bugs 754672
and 754673)
4.0.7
This release fixes one security issue. See the Security Advisory for details.
In addition, the following bugs have been fixed in this release:
o A regression introduced in Bugzilla 4.0 caused some login names to be ignored
when entered in the CC list of bugs. (Bug 756314)
o Keywords are now correctly escaped in the auto-complete form to prevent any
XSS abuse. (Bug 754561)
o A regression introduced in Bugzilla 4.0rc2 when fixing CVE-2011-0046 caused
the "Un-forget the search" link to not work correctly anymore when restoring a
deleted saved search, because this link was lacking a valid token. (Bug 768870)
3.6.10
This release fixes one security issue. See the Security Advisory for details.
http://www.bugzilla.org/security/3.6.9/
Approved by: implicit skv@ (bugzilla / bugzilla3)
Security: CVE-2012-1968
CVE-2012-1969
https://bugzilla.mozilla.org/show_bug.cgi?id=777398
https://bugzilla.mozilla.org/show_bug.cgi?id=777586
vid=58253655-d82c-11e1-907c-20cf30e32f6d
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 51 |
1 files changed, 51 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index e6574733b9d2..7268df6811f8 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -52,6 +52,57 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="58253655-d82c-11e1-907c-20cf30e32f6d"> + <topic>bugzilla -- multiple vulnerabilities</topic> + <affects> + <package> + <range><ge>3.6.0</ge><lt>3.6.10</lt></range> + <range><ge>4.0.0</ge><lt>4.0.7</lt></range> + <range><ge>4.2.0</ge><lt>4.2.2</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <h1>A Bugzilla Security Advisory reports:</h1> + <blockquote cite="http://www.bugzilla.org/security/3.6.9/"> + <p>The following security issues have been discovered in + Bugzilla:</p> + <h1>Information Leak</h1> + <p>Versions: 4.1.1 to 4.2.1, 4.3.1</p> + <p>In HTML bugmails, all bug IDs and attachment IDs are + linkified, and hovering these links displays a tooltip + with the bug summary or the attachment description if + the user is allowed to see the bug or attachment. + But when validating user permissions when generating the + email, the permissions of the user who edited the bug were + taken into account instead of the permissions of the + addressee. This means that confidential information could + be disclosed to the addressee if the other user has more + privileges than the addressee. + Plain text bugmails are not affected as bug and attachment + IDs are not linkified.</p> + <h1>Information Leak</h1> + <p>Versions: 2.17.5 to 3.6.9, 3.7.1 to 4.0.6, 4.1.1 to + 4.2.1, 4.3.1</p> + <p>The description of a private attachment could be visible + to a user who hasn't permissions to access this attachment + if the attachment ID is mentioned in a public comment in + a bug that the user can see.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2012-1968</cvename> + <cvename>CVE-2012-1969</cvename> + <url>https://bugzilla.mozilla.org/show_bug.cgi?id=777398</url> + <url>https://bugzilla.mozilla.org/show_bug.cgi?id=777586</url> + </references> + <dates> + <discovery>2012-07-26</discovery> + <entry>2012-07-27</entry> + </dates> + </vuln> + <vuln vid="17f369dc-d7e7-11e1-90a2-000c299b62e1"> <topic>nsd -- Denial of Service</topic> <affects> |