From owner-svn-ports-all@FreeBSD.ORG Tue Nov 19 17:54:54 2013 Return-Path: Delivered-To: svn-ports-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C8A487FF; Tue, 19 Nov 2013 17:54:54 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id B7E4B2080; Tue, 19 Nov 2013 17:54:54 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.7/8.14.7) with ESMTP id rAJHss5P009807; Tue, 19 Nov 2013 17:54:54 GMT (envelope-from osa@svn.freebsd.org) Received: (from osa@localhost) by svn.freebsd.org (8.14.7/8.14.5/Submit) id rAJHssao009806; Tue, 19 Nov 2013 17:54:54 GMT (envelope-from osa@svn.freebsd.org) Message-Id: <201311191754.rAJHssao009806@svn.freebsd.org> From: "Sergey A. Osokin" Date: Tue, 19 Nov 2013 17:54:54 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r334335 - head/security/vuxml X-SVN-Group: ports-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.16 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2013 17:54:54 -0000 Author: osa Date: Tue Nov 19 17:54:53 2013 New Revision: 334335 URL: http://svnweb.freebsd.org/changeset/ports/334335 Log: Document new vulnerability in www/nginx (< 1.4.4) and www/nginx-devel (< 1.5.7). Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Tue Nov 19 17:39:17 2013 (r334334) +++ head/security/vuxml/vuln.xml Tue Nov 19 17:54:53 2013 (r334335) @@ -51,6 +51,39 @@ Note: Please add new entries to the beg --> + + nginx -- Request line parsing vulnerability + + + nginx + 0.8.411.4.4,1 + + + nginx-devel + 0.8.411.5.7 + + + + +

The nginx project reports:

+
Ivan Fratric of the Google Security Team discovered a bug in nginx, which might + allow an attacker to bypass security restrictions in certain configurations by + using a specially crafted request, or might have potential other impact + (CVE-2013-4547).
+

+ + + + CVE-2013-4547 + http://mailman.nginx.org/pipermail/nginx-announce/2013/000125.html + + + 2013-11-19 + 2013-11-19 + + + chromium -- multiple memory corruption issues