From nobody Wed Oct 25 08:22:17 2023 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4SFhk235jVz4yCGL; Wed, 25 Oct 2023 08:22:18 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4SFhk16dQ5z3Fb4; Wed, 25 Oct 2023 08:22:17 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1698222137; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=UknCYbKx1h3RzYAEfR71eeO3ijpQ39HR/1IAmhGYntc=; b=I4kq1HeQY5hqYta4Ngb4sZN0t5m5JAjdZbUub+qiwvv52BY9PqyA6XCaYsp5lw41dgIGVt lJQmXBG0QHpoYauXURzzL5T8pwIaC3ZX47sUDpeLsWSGVHn7uCNsxYZSNsI/xOO4BVHrc3 /uOkXPFqMhoX4iNsVk9Sf7z0EapyWI9uhuHFBICBTYTzp+RLQlRVINKdjxxbs0e3WD4Izi hMwzLx4SZ/6WibyYXQm+MTlw1D1Mwg1bz6yvlD269pKQPGwfydRS3voX6TIq1i6eUlKlen W/xOCwJuY30sEZSrzrVNq4BMxqLNpAcSnlbL4Mp/N60kyzLYeOz+qh1h2YRHdA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1698222137; a=rsa-sha256; cv=none; b=qhewyhaqxweQAnIk5s4JGUOHpMadm+lJPOiRe0fvoaiB6ztvizlpN7kAsCAlJURY5qiqmk UpHIepNhcFasDgGHMFH5aZ1ACW4QfU8MzaVR79h4QbvqD/HRs2hwx0y9ElfWYbNLPQbamd w3/kb8P0v6na9+AG7t1Iegci2EEQIfteh0NF7mKIQyR4K2o/weCT1Ot8wkOILtlr5J4Lwh y6j54rhUI7z6m44mfkFZuhIWh0jbwv+BtjSW0QkNkzolpquZwm8hK+QRaaWgpgtALHS4wV jBNQlZKv4OBZatPPPLTSMq3EL6JVyRA0EXoutiy6MoAEPepM0H3L6CS12zTBNQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1698222137; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=UknCYbKx1h3RzYAEfR71eeO3ijpQ39HR/1IAmhGYntc=; b=fyU8pFAKxjmPxj9J/8igRdpMG6zGld1ijPbsFF3KnJl8BKCGT8AjwtcZoOqKvX31d/7cA6 V1ieBbHBfqUQXQVEuOhnlvxFgGO4KCbSiZTuHpiYGaDTBwbf3Uu1RgcDPZlCTZUJRRYzPj dpuat7IsUYplR6K1WVJaxw9JZe/bpIXTDVKox2fw1YqotC8weDCozIXQuKN56K6FjEhRGr JvZ+EzsyZM4Tn6uEoS/IaxJr0gzPRM6ELOOG7ptar1dSf33OVC9FhNNKYe/HFbbjCYsahR rEP8CQFGoDJDS4AfYwweqFgbObEBZb/QMhITzx/J/alD4KKvwpHOFyDy/HizFA== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4SFhk15kByzxWB; Wed, 25 Oct 2023 08:22:17 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.17.1/8.17.1) with ESMTP id 39P8MH25069926; Wed, 25 Oct 2023 08:22:17 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.17.1/8.17.1/Submit) id 39P8MHVp069923; Wed, 25 Oct 2023 08:22:17 GMT (envelope-from git) Date: Wed, 25 Oct 2023 08:22:17 GMT Message-Id: <202310250822.39P8MHVp069923@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Fernando =?utf-8?Q?Apestegu=C3=ADa?= Subject: git: 74de9d47efa3 - main - security/vuxml: Register multiple www/squid vulnerabilities List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-all@freebsd.org X-BeenThere: dev-commits-ports-all@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: fernape X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 74de9d47efa3d18466fdf05a9c52b7fcf8c121d3 Auto-Submitted: auto-generated The branch main has been updated by fernape: URL: https://cgit.FreeBSD.org/ports/commit/?id=74de9d47efa3d18466fdf05a9c52b7fcf8c121d3 commit 74de9d47efa3d18466fdf05a9c52b7fcf8c121d3 Author: Fernando Apesteguía AuthorDate: 2023-10-25 08:14:20 +0000 Commit: Fernando Apesteguía CommitDate: 2023-10-25 08:21:59 +0000 security/vuxml: Register multiple www/squid vulnerabilities Denial of Service in FTP Base Score: 8.6 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Request/Response smuggling in HTTP/1.1 and ICAP Base Score: 9.3 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N Denial of Service in HTTP Digest Authentication Base Score: 9.9 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H --- security/vuxml/vuln/2023.xml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml index 67a8f8319be8..e96fe67d3702 100644 --- a/security/vuxml/vuln/2023.xml +++ b/security/vuxml/vuln/2023.xml @@ -1,3 +1,34 @@ + + squid -- Multiple vulnerabilities + + + squid + 6.4 + + + + +

The squid-cache project reports:

+
+
    +
  • Denial of Service in FTP
    • +
  • Request/Response smuggling in HTTP/1.1 and ICAP
    • +
  • Denial of Service in HTTP Digest Authentication
    • +
+
+ + + + https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w + https://github.com/squid-cache/squid/security/advisories/GHSA-j83v-w3p4-5cqh + https://github.com/squid-cache/squid/security/advisories/GHSA-phqj-m8gv-cq4g + + + 2023-10-21 + 2023-10-25 + + + OpenSSL -- potential loss of confidentiality