Date: Thu, 1 Oct 2015 03:14:14 +0000 (UTC) From: Jason Unovitch <junovitch@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r398246 - head/security/vuxml Message-ID: <201510010314.t913EEPf046733@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: junovitch Date: Thu Oct 1 03:14:14 2015 New Revision: 398246 URL: https://svnweb.freebsd.org/changeset/ports/398246 Log: Document security advisory for the Apache James server PR: 203461 Security: be3069c9-67e7-11e5-9909-002590263bf5 Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Thu Oct 1 02:52:46 2015 (r398245) +++ head/security/vuxml/vuln.xml Thu Oct 1 03:14:14 2015 (r398246) @@ -58,6 +58,39 @@ Notes: --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="be3069c9-67e7-11e5-9909-002590263bf5"> + <topic>james -- multiple vulnerabilities</topic> + <affects> + <package> + <name>james</name> + <range><lt>2.3.2.1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>The Apache James Project reports:</p> + <blockquote cite="http://james.apache.org/download.cgi#Apache_James_Server">; + <p>This release has many enhancements and bug fixes over the previous + release. See the Release Notes for a detailed list of changes. Some + of the earlier defects could turn a James mail server into an Open + Relay and allow files to be written on disk. All users of James + Server are urged to upgrade to version v2.3.2.1 as soon as + possible.</p> + </blockquote> + </body> + </description> + <references> + <freebsdpr>ports/203461</freebsdpr> + <certvu>988628</certvu> + <url>http://james.apache.org/download.cgi#Apache_James_Server</url>; + <url>https://blogs.apache.org/james/entry/apache_james_server_2_3</url>; + </references> + <dates> + <discovery>2015-09-30</discovery> + <entry>2015-10-01</entry> + </dates> + </vuln> + <vuln vid="1e7f0c11-673a-11e5-98c8-60a44c524f57"> <topic>otrs -- Scheduler Process ID File Access</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201510010314.t913EEPf046733>