Attachment 185244 Details for Bug 221399 – patch security/vuxml

[patch] patch security/vuxml

vuxml.diff (text/plain), 1.37 KB, created by Olivier Duchateau on 2017-08-10 20:41:36 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Olivier Duchateau

Created: 2017-08-10 20:41:36 UTC

Size: 1.37 KB

patch

obsolete

>Index: vuln.xml
>===================================================================
>--- vuln.xml	(rÃ©vision 447720)
>+++ vuln.xml	(copie de travail)
>@@ -58,6 +58,34 @@
> * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
> -->
> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
>+ <vuln vid="49e2fbe2-7e09-11e7-9d6a-08002777bcf4">
>+ <topic>mercurial -- multiple vulnerabilities</topic>
>+ <affects>
>+ <package>
>+	<name>mercurial</name>
>+	<range><lt>4.2.2</lt></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	mercurial reports:
>+	<blockquote cite="https://www.mercurial-scm.org/pipermail/mercurial-packaging/2017-August/000216.html">
>+	 CVE-2017-1000115: Mercurial's symlink auditing was incomplete
>+	 and could be abused to write to files outside the repository.
>+	 CVE-2017-1000116: Mercurial was not sanitizing hostnames
>+	 passed to ssh, allowing injection attacks.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://www.mercurial-scm.org/pipermail/mercurial-packaging/2017-August/000216.html</url>
>+ </references>
>+ <dates>
>+ <discovery>2017-08-10</discovery>
>+ <entry>2017-08-10</entry>
>+ </dates>
>+ </vuln>
>+
> <vuln vid="982872f1-7dd3-11e7-9736-6cc21735f730">
> <topic>PostgreSQL vulnerabilities</topic>
> <affects>

Actions: View | Diff

Attachments on bug 221399: 185243 | 185244 | 185294