From owner-cvs-all@FreeBSD.ORG Tue May 23 19:24:40 2006 Return-Path: X-Original-To: cvs-all@FreeBSD.org Delivered-To: cvs-all@FreeBSD.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D52DF16A93D; Tue, 23 May 2006 19:24:40 +0000 (UTC) (envelope-from simon@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 55B0B43D94; Tue, 23 May 2006 19:24:36 +0000 (GMT) (envelope-from simon@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.6/8.13.6) with ESMTP id k4NJNmKW092729; Tue, 23 May 2006 19:23:48 GMT (envelope-from simon@repoman.freebsd.org) Received: (from simon@localhost) by repoman.freebsd.org (8.13.6/8.13.4/Submit) id k4NJNmQ3092728; Tue, 23 May 2006 19:23:48 GMT (envelope-from simon) Message-Id: <200605231923.k4NJNmQ3092728@repoman.freebsd.org> From: "Simon L. Nielsen" Date: Tue, 23 May 2006 19:23:48 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports/security/vuxml vuln.xml ports/www/frontpage Makefile ports/www/mod_frontpage2-rtr Makefile X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 May 2006 19:24:50 -0000 simon 2006-05-23 19:23:48 UTC FreeBSD ports repository Modified files: security/vuxml vuln.xml www/frontpage Makefile www/mod_frontpage2-rtr Makefile Log: Document frontpage -- cross site scripting vulnerability and point FORBIDDEN from the frontpage ports at it. While this is "only" a cross site scripting vulnerability it has some rather serious implications which can allow an attacker to take over a web site, so I'm keeping FORBIDDEN. Revision Changes Path 1.1042 +49 -1 ports/security/vuxml/vuln.xml 1.17 +1 -1 ports/www/frontpage/Makefile 1.8 +1 -1 ports/www/mod_frontpage2-rtr/Makefile