Bug 246931 - security/vuxml multiple issues freerdp
Summary: security/vuxml multiple issues freerdp
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Kyle Evans
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-06-02 08:21 UTC by rob2g2
Modified: 2020-06-08 15:53 UTC (History)
4 users (show)

See Also:
bugzilla: maintainer-feedback? (ports-secteam)

Attachments
patch to show issues < 2.0.0 (1.41 KB, patch)
2020-06-02 08:22 UTC, rob2g2 		no flags Details | Diff
patch to show issues < 2.1.0 (1.29 KB, patch)
2020-06-02 08:23 UTC, rob2g2 		no flags Details | Diff
patch to show issues < 2.1.1 (911 bytes, patch)
2020-06-02 08:25 UTC, rob2g2 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description rob2g2 2020-06-02 08:21:24 UTC 
FreeRDP has multiple vulnerabilities in different versions. versions 2.0.0 and 2.1.0 and 2.1.1 each address different issues, patches for inclusion in vuxml attached.
Comment 1 rob2g2 2020-06-02 08:22:37 UTC 
Created attachment 215156 [details]
patch to show issues < 2.0.0
Comment 2 rob2g2 2020-06-02 08:23:11 UTC 
Created attachment 215157 [details]
patch to show issues < 2.1.0
Comment 3 rob2g2 2020-06-02 08:25:31 UTC 
Created attachment 215158 [details]
patch to show issues < 2.1.1
Comment 4 commit-hook freebsd_committer freebsd_triage 2020-06-08 15:49:48 UTC 
A commit references this bug:

Author: kevans
Date: Mon Jun  8 15:49:06 UTC 2020
New revision: 538227
URL: https://svnweb.freebsd.org/changeset/ports/538227

Log:
  security/vuxml: document new vulnerabilities in net/freerdp < 2.1.0

  PR:		246931, 245517
  Obtained from:	https://github.com/FreeRDP/FreeRDP/blob/2.1.0/ChangeLog
  Approved by:	koobs (mentor)

Changes:
  head/security/vuxml/vuln.xml
Comment 5 Kyle Evans freebsd_committer freebsd_triage 2020-06-08 15:53:03 UTC 
Documented in r538227 and committed in r538228; thanks!