aboutsummaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authorfeld <feld@FreeBSD.org>2017-01-10 01:32:03 +0800
committerfeld <feld@FreeBSD.org>2017-01-10 01:32:03 +0800
commitce2317e81172b4bc6002ce983fdc4ecb02b67ed7 (patch)
treeb694219c661b0fc7740d1871651cf4428646201f /security
parent4ee4e5cd12d78e199fe1de5a0df8eec02ebb5fa1 (diff)
downloadfreebsd-ports-gnome-ce2317e81172b4bc6002ce983fdc4ecb02b67ed7.tar.gz
freebsd-ports-gnome-ce2317e81172b4bc6002ce983fdc4ecb02b67ed7.tar.zst
freebsd-ports-gnome-ce2317e81172b4bc6002ce983fdc4ecb02b67ed7.zip
Document libdwarf vulnerabilities
Security: CVE-2016-5027 CVE-2016-5028 CVE-2016-5029 CVE-2016-5030 Security: CVE-2016-5031 CVE-2016-5032 CVE-2016-5033 CVE-2016-5035 Security: CVE-2016-5037 CVE-2016-5040 CVE-2016-5041 CVE-2016-5043 Security: CVE-2016-5044 CVE-2016-7510 CVE-2016-7511 CVE-2016-8679 Security: CVE-2016-8680 CVE-2016-8681 CVE-2016-9275 CVE-2016-9276 Security: CVE-2016-9480 CVE-2016-9558 PR: 215085
Diffstat (limited to 'security')
-rw-r--r--security/vuxml/vuln.xml49
1 files changed, 49 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index a22f19270c32..e48b36fb0b0f 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -58,6 +58,55 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="83041ca7-d690-11e6-9171-14dae9d210b8">
+ <topic>libdwarf -- multiple vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>libdwarf</name>
+ <range><lt>20161124</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Christian Rebischke reports:</p>
+ <blockquote cite="https://lwn.net/Articles/708092/">
+ <p>libdwarf is vulnerable to multiple issues including
+ arbitrary code execution, information disclosure and denial of
+ service.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <url>https://lwn.net/Articles/708092/</url>
+ <cvename>CVE-2016-5027</cvename>
+ <cvename>CVE-2016-5028</cvename>
+ <cvename>CVE-2016-5029</cvename>
+ <cvename>CVE-2016-5030</cvename>
+ <cvename>CVE-2016-5031</cvename>
+ <cvename>CVE-2016-5032</cvename>
+ <cvename>CVE-2016-5033</cvename>
+ <cvename>CVE-2016-5035</cvename>
+ <cvename>CVE-2016-5037</cvename>
+ <cvename>CVE-2016-5040</cvename>
+ <cvename>CVE-2016-5041</cvename>
+ <cvename>CVE-2016-5043</cvename>
+ <cvename>CVE-2016-5044</cvename>
+ <cvename>CVE-2016-7510</cvename>
+ <cvename>CVE-2016-7511</cvename>
+ <cvename>CVE-2016-8679</cvename>
+ <cvename>CVE-2016-8680</cvename>
+ <cvename>CVE-2016-8681</cvename>
+ <cvename>CVE-2016-9275</cvename>
+ <cvename>CVE-2016-9276</cvename>
+ <cvename>CVE-2016-9480</cvename>
+ <cvename>CVE-2016-9558</cvename>
+ </references>
+ <dates>
+ <discovery>2016-12-04</discovery>
+ <entry>2017-01-09</entry>
+ </dates>
+ </vuln>
+
<vuln vid="03532a19-d68e-11e6-9171-14dae9d210b8">
<topic>lynx -- multiple vulnerabilities</topic>
<affects>