Date: Mon, 12 Feb 2007 13:38:29 GMT From: KOMATSU Shinichiro<koma2@lovepeers.org> To: freebsd-gnats-submit@FreeBSD.org Subject: ports/109086: security/vuxml: fix the entries of tdiary Message-ID: <200702121338.l1CDcTBg091468@www.freebsd.org> Resent-Message-ID: <200702121340.l1CDeLIV015467@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 109086
>Category: ports
>Synopsis: security/vuxml: fix the entries of tdiary
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: doc-bug
>Submitter-Id: current-users
>Arrival-Date: Mon Feb 12 13:40:18 GMT 2007
>Closed-Date:
>Last-Modified:
>Originator: KOMATSU Shinichiro
>Release: FreeBSD 6.2-RELEASE i386
>Organization:
>Environment:
FreeBSD 6.2-RELEASE i386
>Description:
Fix the VuXML entries of recently discovered tdiary vulnerabilities
("fefd93d8-8af5-11db-9d01-0016179b2dd5" and "666b8c9e-8212-11db-851e-0016179b2dd5")
as follows:
- correct the affected version numbers
- package name of www/tdiary-devel is "tdiary-devel", not "tdiary"
- add ja-tdiary and ja-tdiary-devel to affected packages
>How-To-Repeat:
>Fix:
Patch attached with submission follows:
Index: security/vuxml/vuln.xml
===================================================================
RCS file: /home/ncvs/ports/security/vuxml/vuln.xml,v
retrieving revision 1.1270
diff -u -r1.1270 vuln.xml
--- security/vuxml/vuln.xml 17 Jan 2007 22:17:49 -0000 1.1270
+++ security/vuxml/vuln.xml 12 Feb 2007 13:25:01 -0000
@@ -725,9 +725,14 @@
<topic>tdiary -- injection vulnerability</topic>
<affects>
<package>
+ <name>ja-tdiary</name>
<name>tdiary</name>
- <range><lt>2.0.3</lt></range>
- <range><gt>2.1</gt><lt>2.1.4.20061126</lt></range>
+ <range><le>2.0.3</le></range>
+ </package>
+ <package>
+ <name>ja-tdiary-devel</name>
+ <name>tdiary-devel</name>
+ <range><gt>2.1</gt><lt>2.1.4_2</lt></range>
</package>
</affects>
<description>
@@ -741,7 +746,7 @@
<dates>
<discovery>2006-12-10</discovery>
<entry>2006-12-13</entry>
- <modified>2006-12-15</modified>
+ <modified>2007-02-12</modified>
</dates>
</vuln>
@@ -1039,9 +1044,14 @@
<topic>tdiary -- cross site scripting vulnerability</topic>
<affects>
<package>
+ <name>ja-tdiary</name>
<name>tdiary</name>
- <range><lt>2.0.2</lt></range>
- <range><gt>2.1</gt><lt>2.1.4.20061115</lt></range>
+ <range><le>2.0.2</le></range>
+ </package>
+ <package>
+ <name>ja-tdiary-devel</name>
+ <name>tdiary-devel</name>
+ <range><gt>2.1</gt><lt>2.1.4_1</lt></range>
</package>
</affects>
<description>
@@ -1056,6 +1066,7 @@
<dates>
<discovery>2006-11-26</discovery>
<entry>2006-12-02</entry>
+ <modified>2007-02-12</modified>
</dates>
</vuln>
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200702121338.l1CDcTBg091468>