svn commit: r430382 - branches/2017Q1/security/vuxml
Ryan Steinmetz
zi at FreeBSD.org
Mon Jan 2 17:13:38 UTC 2017
Author: zi
Date: Mon Jan 2 17:13:37 2017
New Revision: 430382
URL: https://svnweb.freebsd.org/changeset/ports/430382
Log:
MFH: r430381
- Document multiple vulnerabilities in w3m ports
PR: 215070
Submitted by: kcwu at csie.org
Security: eafa3aec-211b-4dd4-9b8a-a664a3f0917a
Approved by: ports-secteam (zi@)
Modified:
branches/2017Q1/security/vuxml/vuln.xml
Directory Properties:
branches/2017Q1/ (props changed)
Modified: branches/2017Q1/security/vuxml/vuln.xml
==============================================================================
--- branches/2017Q1/security/vuxml/vuln.xml Mon Jan 2 17:12:48 2017 (r430381)
+++ branches/2017Q1/security/vuxml/vuln.xml Mon Jan 2 17:13:37 2017 (r430382)
@@ -58,6 +58,65 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="eafa3aec-211b-4dd4-9b8a-a664a3f0917a">
+ <topic>w3m -- multiple vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>w3m</name>
+ <name>w3m-img</name>
+ <name>ja-w3m</name>
+ <name>ja-w3m-img</name>
+ <range><le>0.5.4</le></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Multiple remote code execution and denial of service conditions present.</p>
+ </body>
+ </description>
+ <references>
+ <url>http://seclists.org/oss-sec/2016/q4/452</url>
+ <url>http://seclists.org/oss-sec/2016/q4/516</url>
+ <cvename>CVE-2016-9422</cvename>
+ <cvename>CVE-2016-9423</cvename>
+ <cvename>CVE-2016-9424</cvename>
+ <cvename>CVE-2016-9425</cvename>
+ <cvename>CVE-2016-9426</cvename>
+ <cvename>CVE-2016-9428</cvename>
+ <cvename>CVE-2016-9429</cvename>
+ <cvename>CVE-2016-9430</cvename>
+ <cvename>CVE-2016-9431</cvename>
+ <cvename>CVE-2016-9432</cvename>
+ <cvename>CVE-2016-9433</cvename>
+ <cvename>CVE-2016-9434</cvename>
+ <cvename>CVE-2016-9435</cvename>
+ <cvename>CVE-2016-9436</cvename>
+ <cvename>CVE-2016-9437</cvename>
+ <cvename>CVE-2016-9438</cvename>
+ <cvename>CVE-2016-9439</cvename>
+ <cvename>CVE-2016-9440</cvename>
+ <cvename>CVE-2016-9441</cvename>
+ <cvename>CVE-2016-9442</cvename>
+ <cvename>CVE-2016-9443</cvename>
+ <cvename>CVE-2016-9622</cvename>
+ <cvename>CVE-2016-9623</cvename>
+ <cvename>CVE-2016-9624</cvename>
+ <cvename>CVE-2016-9625</cvename>
+ <cvename>CVE-2016-9626</cvename>
+ <cvename>CVE-2016-9627</cvename>
+ <cvename>CVE-2016-9628</cvename>
+ <cvename>CVE-2016-9629</cvename>
+ <cvename>CVE-2016-9630</cvename>
+ <cvename>CVE-2016-9631</cvename>
+ <cvename>CVE-2016-9632</cvename>
+ <cvename>CVE-2016-9633</cvename>
+ </references>
+ <dates>
+ <discovery>2016-11-03</discovery>
+ <entry>2017-01-01</entry>
+ </dates>
+ </vuln>
+
<vuln vid="d0b12952-cb86-11e6-906f-0cc47a065786">
<topic>h2o -- Use-after-free vulnerability</topic>
<affects>
More information about the svn-ports-all
mailing list