svn commit: r553726 - head/security/vuxml
Dima Panov
fluffy at FreeBSD.org
Sat Oct 31 02:38:10 UTC 2020
Author: fluffy
Date: Sat Oct 31 02:38:09 2020
New Revision: 553726
URL: https://svnweb.freebsd.org/changeset/ports/553726
Log:
security/vuxml: Document stack overflow in tmux
PR: 250737
Modified:
head/security/vuxml/vuln.xml
Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml Sat Oct 31 00:51:52 2020 (r553725)
+++ head/security/vuxml/vuln.xml Sat Oct 31 02:38:09 2020 (r553726)
@@ -58,6 +58,32 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="8827134c-1a8f-11eb-9bb0-08002725d892">
+ <topic>tmux -- stack overflow in CSI parsing</topic>
+ <affects>
+ <package>
+ <name>tmux</name>
+ <range><lt>3.1c</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Nicholas Marriott reports:</p>
+ <blockquote cite="https://groups.google.com/g/tmux-users/c/DGfmsD9CM00/m/Six6uZG0AQAJ">
+ <p>tmux has a stack overflow in CSI parsing.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <url>https://groups.google.com/g/tmux-users/c/DGfmsD9CM00/m/Six6uZG0AQAJ</url>
+ <url>https://marc.info/?l=openbsd-announce&m=160399126725142&w=2</url>
+ </references>
+ <dates>
+ <discovery>2020-10-29</discovery>
+ <entry>2020-10-30</entry>
+ </dates>
+ </vuln>
+
<vuln vid="94ffc0d9-1915-11eb-b809-b42e991fc52e">
<topic>motion -- Denial of Service</topic>
<affects>
More information about the svn-ports-all
mailing list