svn commit: r340057 - branches/2014Q1/security/vuxml
Bernhard Froehlich
decke at FreeBSD.org
Fri Jan 17 15:40:11 UTC 2014
Author: decke
Date: Fri Jan 17 15:40:10 2014
New Revision: 340057
URL: http://svnweb.freebsd.org/changeset/ports/340057
QAT: https://qat.redports.org/buildarchive/r340057/
Log:
MFH: r339929
Document virtualbox-ose vulnerabilities
Security: CVE-2013-5892
Modified:
branches/2014Q1/security/vuxml/vuln.xml
Directory Properties:
branches/2014Q1/ (props changed)
Modified: branches/2014Q1/security/vuxml/vuln.xml
==============================================================================
--- branches/2014Q1/security/vuxml/vuln.xml Fri Jan 17 15:37:33 2014 (r340056)
+++ branches/2014Q1/security/vuxml/vuln.xml Fri Jan 17 15:40:10 2014 (r340057)
@@ -51,6 +51,36 @@ Note: Please add new entries to the beg
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="81f1fdc2-7ec7-11e3-a6c6-00163e1ed244">
+ <topic>virtualbox-ose -- local vulnerability</topic>
+ <affects>
+ <package>
+ <name>virtualbox-ose</name>
+ <range><lt>4.2.22</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Oracle reports:</p>
+ <blockquote cite="http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html">
+ <p>Unspecified vulnerability in the Oracle VM VirtualBox
+ component in Oracle Virtualization VirtualBox prior to
+ 3.2.20, 4.0.22, 4.1.30, 4.2.22, and 4.3.6 allows local
+ users to affect confidentiality, integrity, and availability
+ via unknown vectors related to Core.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2013-5892</cvename>
+ <url>http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html</url>
+ </references>
+ <dates>
+ <discovery>2014-01-15</discovery>
+ <entry>2014-01-16</entry>
+ </dates>
+ </vuln>
+
<vuln vid="5acf4638-7e2c-11e3-9fba-00262d5ed8ee">
<topic>chromium -- multiple vulnerabilities</topic>
<affects>
More information about the svn-ports-all
mailing list