Date: Fri, 12 May 2023 07:39:39 GMT From: Alexander Leidinger <netchild@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: dec15e8ebb5a - main - security/vuxml: add piwigo vulnerabilities Message-ID: <202305120739.34C7ddqP056480@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by netchild: URL: https://cgit.FreeBSD.org/ports/commit/?id=dec15e8ebb5ae2651aa33f8036bc7163af016f24 commit dec15e8ebb5ae2651aa33f8036bc7163af016f24 Author: Alexander Leidinger <netchild@FreeBSD.org> AuthorDate: 2023-05-12 07:38:17 +0000 Commit: Alexander Leidinger <netchild@FreeBSD.org> CommitDate: 2023-05-12 07:39:35 +0000 security/vuxml: add piwigo vulnerabilities --- security/vuxml/vuln/2023.xml | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml index 86a7ea1eac08..96e4660dadff 100644 --- a/security/vuxml/vuln/2023.xml +++ b/security/vuxml/vuln/2023.xml @@ -1,3 +1,28 @@ + <vuln vid="ec63bc8e-f092-11ed-85ca-001517a2e1a4"> + <topic>piwigo -- SQL injection</topic> + <affects> + <package> + <name>piwigo</name> + <range><lt>13.7.0</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Piwigo reports:</p> + <blockquote cite="https://www.piwigo.org/release-13.7.0">; + <p>Piwigo is affected by multiple SQL injection issues.</p> + </blockquote> + </body> + </description> + <references> + <url>https://www.piwigo.org/release-13.7.0</url>; + </references> + <dates> + <discovery>2023-03-01</discovery> + <entry>2023-05-12</entry> + </dates> + </vuln> + <vuln vid="4b636f50-f011-11ed-bbae-6cc21735f730"> <topic>postgresql-server -- Row security policies disregard user ID changes after inlining</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202305120739.34C7ddqP056480>