git: ade182e4d933 - main - security/vuxml: document nginx vulnerabilities
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 19 Oct 2022 13:56:09 UTC
The branch main has been updated by osa:
URL: https://cgit.FreeBSD.org/ports/commit/?id=ade182e4d933366fc691757539f6fef2b7f1830f
commit ade182e4d933366fc691757539f6fef2b7f1830f
Author: Sergey A. Osokin <osa@FreeBSD.org>
AuthorDate: 2022-10-19 13:53:38 +0000
Commit: Sergey A. Osokin <osa@FreeBSD.org>
CommitDate: 2022-10-19 13:53:38 +0000
security/vuxml: document nginx vulnerabilities
Document CVE-2022-41741, CVE-2022-41742
---
security/vuxml/vuln-2022.xml | 35 +++++++++++++++++++++++++++++++++++
1 file changed, 35 insertions(+)
diff --git a/security/vuxml/vuln-2022.xml b/security/vuxml/vuln-2022.xml
index 67055630e7fe..aea646c9ae40 100644
--- a/security/vuxml/vuln-2022.xml
+++ b/security/vuxml/vuln-2022.xml
@@ -1,3 +1,38 @@
+ <vuln vid="676d4f16-4fb3-11ed-a374-8c164567ca3c">
+ <topic>nginx -- Two vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>nginx</name>
+ <range><ge>1.0.7</ge><lt>1.22.1</lt></range>
+ </package>
+ <package>
+ <name>nginx-devel</name>
+ <range><ge>1.1.3</ge><lt>1.23.2</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>NGINX Development Team reports:</p>
+ <blockquote cite="https://mailman.nginx.org/archives/list/nginx@nginx.org/thread/F7TMIHDNNU3M52GYS23UWDWW2R2BLVVH/">
+ <p>Two security issues were identified in the ngx_http_mp4_module,
+ which might allow an attacker to cause a worker process crash
+ or worker process memory disclosure by using a specially crafted
+ mp4 file, or might have potential other impact (CVE-2022-41741,
+ CVE-2022-41742).</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2022-41741</cvename>
+ <cvename>CVE-2022-41742</cvename>
+ <url>https://mailman.nginx.org/archives/list/nginx@nginx.org/thread/F7TMIHDNNU3M52GYS23UWDWW2R2BLVVH/</url>
+ </references>
+ <dates>
+ <discovery>2022-10-19</discovery>
+ <entry>2022-10-19</entry>
+ </dates>
+ </vuln>
+
<vuln vid="2523bc76-4f01-11ed-929b-002590f2a714">
<topic>git -- Multiple vulnerabilities</topic>
<affects>