svn commit: r463342 - head/security/vuxml
Palle Girgensohn
girgen at FreeBSD.org
Thu Mar 1 15:58:44 UTC 2018
Author: girgen
Date: Thu Mar 1 15:58:43 2018
New Revision: 463342
URL: https://svnweb.freebsd.org/changeset/ports/463342
Log:
Document PostgreSQL vulnerability
Security: CVE-2018-1058
Modified:
head/security/vuxml/vuln.xml
Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml Thu Mar 1 15:58:00 2018 (r463341)
+++ head/security/vuxml/vuln.xml Thu Mar 1 15:58:43 2018 (r463342)
@@ -58,6 +58,50 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="e3eeda2e-1d67-11e8-a2ec-6cc21735f730">
+ <topic>PostgreSQL vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>postgresql93-server</name>
+ <range><ge>9.3.0</ge><lt>9.3.22</lt></range>
+ </package>
+ <package>
+ <name>postgresql94-server</name>
+ <range><ge>9.4.0</ge><lt>9.4.17</lt></range>
+ </package>
+ <package>
+ <name>postgresql95-server</name>
+ <range><ge>9.5.0</ge><lt>9.5.12</lt></range>
+ </package>
+ <package>
+ <name>postgresql96-server</name>
+ <range><ge>9.6.0</ge><lt>9.6.8</lt></range>
+ </package>
+ <package>
+ <name>postgresql10-server</name>
+ <range><ge>10.0</ge><lt>10.3</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>The PostgreSQL project reports:</p>
+ <blockquote cite="https://www.postgresql.org/about/news/1834/">
+ <ul>
+ <li>CVE-2018-1058: Uncontrolled search path element in pg_dump and other client applications</li>
+ </ul>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <url>https://wiki.postgresql.org/wiki/A_Guide_to_CVE-2018-1058:_Protect_Your_Search_Path</url>
+ <cvename>CVE-2018-1058</cvename>
+ </references>
+ <dates>
+ <discovery>2018-03-01</discovery>
+ <entry>2018-03-01</entry>
+ </dates>
+ </vuln>
+
<vuln vid="6a449a37-1570-11e8-8e00-000c294a5758">
<topic>strongswan - Insufficient input validation in RSASSA-PSS signature parser</topic>
<affects>
More information about the svn-ports-head
mailing list