diff options
| author | delphij <delphij@FreeBSD.org> | 2008-11-09 11:46:45 +0800 |
|---|---|---|
| committer | delphij <delphij@FreeBSD.org> | 2008-11-09 11:46:45 +0800 |
| commit | f57df1a07d6f41e405a386f1fbae290924a54848 (patch) | |
| tree | 8e32e4d2eff5c4933f27f22e2eb7dac34e76419c /security | |
| parent | bc82f9044bc6550676a2ff74497ca1dbda6cf9be (diff) | |
| download | freebsd-ports-graphics-f57df1a07d6f41e405a386f1fbae290924a54848.tar.gz freebsd-ports-graphics-f57df1a07d6f41e405a386f1fbae290924a54848.tar.zst freebsd-ports-graphics-f57df1a07d6f41e405a386f1fbae290924a54848.zip | |
Document trac wiki markup DoS issue
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index ff8bf1b548b..0161ad7f7f7 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,39 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="c89a3ebb-ae07-11dd-b4b2-001f3c8eabeb"> + <topic>trac -- potential DOS vulnerability</topic> + <affects> + <package> + <name>trac</name> + <range><lt>0.11.2</lt></range> + </package> + <package> + <name>ja-trac</name> + <range><lt>0.11.2</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Trac development team reports:</p> + <blockquote cite="http://groups.google.com/group/trac-announce/browse_thread/thread/67f7a22ec818d97d"> + <p>0.11.2 is a new stable maintenance release. It contains + several security fixes and everyone is recommended to + upgrade their installations.</p> + <p>Bug fixes:</p> + <p>Fixes potential DOS vulnerability with certain wiki markup.</p> + </blockquote> + </body> + </description> + <references> + <url>http://groups.google.com/group/trac-announce/browse_thread/thread/67f7a22ec818d97d</url> + </references> + <dates> + <discovery>2008-11-08</discovery> + <entry>2008-11-09</entry> + </dates> + </vuln> + <vuln vid="4b09378e-addb-11dd-a578-0030843d3802"> <topic>vlc -- cue processing stack overflow</topic> <affects> |