diff options
| author | mandree <mandree@FreeBSD.org> | 2012-12-04 04:16:21 +0800 |
|---|---|---|
| committer | mandree <mandree@FreeBSD.org> | 2012-12-04 04:16:21 +0800 |
| commit | 067e03c4f5ca4bbb2740f348eb694204532a3e45 (patch) | |
| tree | 8dc40083c81ef74968abfe9c4648b7acb9432994 /security | |
| parent | 58f1ae46ef7964adadae8d9cb8e66d065c1029ab (diff) | |
| download | freebsd-ports-gnome-067e03c4f5ca4bbb2740f348eb694204532a3e45.tar.gz freebsd-ports-gnome-067e03c4f5ca4bbb2740f348eb694204532a3e45.tar.zst freebsd-ports-gnome-067e03c4f5ca4bbb2740f348eb694204532a3e45.zip | |
Update bogofilter to new upstream release 1.2.3.
Security update to fix a heap corruption bug with invalid base64 input,
reported and fixed by Julius Plenz, FU Berlin, Germany.
Feature safe: yes
Security: CVE-2012-5468
Security: f524d8e0-3d83-11e2-807a-080027ef73ec
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 0586f46404d5..849785755794 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -51,6 +51,31 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="f524d8e0-3d83-11e2-807a-080027ef73ec"> + <topic>bogofilter -- heap corruption by invalid base64 input</topic> + <affects> + <package> <name>bogofilter</name> <range><lt>1.2.3</lt></range> </package> + <package> <name>bogofilter-sqlite</name> <range><lt>1.2.3</lt></range> </package> + <package> <name>bogofilter-tc</name> <range><lt>1.2.3</lt></range> </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>David Relson reports:</p> + <blockquote cite="https://bogofilter.svn.sourceforge.net/svnroot/bogofilter/trunk/bogofilter/NEWS"> + <p>Fix a heap corruption in base64 decoder on invalid input. + Analysis and patch by Julius Plenz, [FU Berlin, Germany].</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2012-5468</cvename> + </references> + <dates> + <discovery>2012-10-17</discovery> + <entry>2012-12-03</entry> + </dates> + </vuln> + <vuln vid="5af51ae9-3acd-11e2-a4eb-00262d5ed8ee"> <topic>chromium -- multiple vulnerabilities</topic> <affects> |