aboutsummaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authormnag <mnag@FreeBSD.org>2005-10-12 08:01:03 +0800
committermnag <mnag@FreeBSD.org>2005-10-12 08:01:03 +0800
commit20b00575ef281d02badc3223e9bb49f3f5020b9c (patch)
tree18ca1f5b154445ea81d5bba10c445bf2e0a4cb32 /security
parent64215de35a74b87dc20ea6f31582b75225824b03 (diff)
downloadfreebsd-ports-graphics-20b00575ef281d02badc3223e9bb49f3f5020b9c.tar.gz
freebsd-ports-graphics-20b00575ef281d02badc3223e9bb49f3f5020b9c.tar.zst
freebsd-ports-graphics-20b00575ef281d02badc3223e9bb49f3f5020b9c.zip
Add entry from zope28
Diffstat (limited to 'security')
-rw-r--r--security/vuxml/vuln.xml30
1 files changed, 30 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index c1a5610d05a..43898f3e6a2 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -34,6 +34,36 @@ Note: Please add new entries to the beginning of this file.
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="d2b80c7c-3aae-11da-9484-00123ffe8333">
+ <topic>zope28 -- expose RestructuredText functionalies to untrusted users</topic>
+ <affects>
+ <package>
+ <name>zope28</name>
+ <range><ge>2.6.0</ge><lt>2.8.1_2</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Hotfix 2005-10-09 Alert:</p>
+ <blockquote cite="http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert">
+ <p>This hotfix addresses an important security issue that affects
+ users of Zope versions 2.6 or higher.</p>
+ <p>This hotfix resolves a security issue with docutils.</p>
+ <p>Affected are possibly all Zope instances that expose
+ RestructuredText functionalies to untrusted users through the web.</p>
+ <p>The upcoming Zope 2.7.8 and 2.8.2 releases will fix this issue as well.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <url>http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert</url>
+ </references>
+ <dates>
+ <discovery>2005-10-09</discovery>
+ <entry>2005-10-11</entry>
+ </dates>
+ </vuln>
+
<vuln vid="3bc5691e-38dd-11da-92f5-020039488e34">
<topic>libxine -- format string vulnerability</topic>
<affects>