Attachment 173213 Details for Bug 211495 – vuxml diff

[patch] vuxml diff

vuxml.diff (text/plain), 1.47 KB, created by Guido Falsi on 2016-08-03 08:50:01 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Guido Falsi

Created: 2016-08-03 08:50:01 UTC

Size: 1.47 KB

patch

obsolete

>Index: vuln.xml
>===================================================================
>--- vuln.xml	(revision 419498)
>+++ vuln.xml	(working copy)
>@@ -58,6 +58,37 @@
> * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
> -->
> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
>+ <vuln vid="ef0033ad-5823-11e6-80cc-001517f335e2">
>+ <topic>Multiple vulnerabilities found in Lighttpd</topic>
>+ <affects>
>+ <package>
>+	<name>lighttpd</name>
>+	<range><lt>1.4.41</lt></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Lighttpd Project reports:
>+	<blockquote cite="http://www.lighttpd.net/2016/7/31/1.4.41/">
>+	 Security fixes for Lighttpd:
>+	 <ul>
>+	 <li>security: encode quoting chars in HTML and XML</li>
>+	 <li>security: ensure gid != 0 if server.username is set, but not server.groupname</li>
>+	 <li>security: disable stat_cache if server.follow-symlink = âdisableâ</li>
>+	 <li>security: httpoxy defense: do not emit HTTP_PROXY to CGI env</li>
>+	 </ul>
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>http://www.lighttpd.net/2016/7/31/1.4.41/</url>
>+ </references>
>+ <dates>
>+ <discovery>2016-07-31</discovery>
>+ <entry>2016-08-03</entry>
>+ </dates>
>+ </vuln>
>+
> <vuln vid="06574c62-5854-11e6-b334-002590263bf5">
> <topic>xen-tools -- virtio: unbounded memory allocation issue</topic>
> <affects>

Flags:

pkubaj: maintainer-approval+

Actions: View | Diff

Attachments on bug 211495: 173152 | 173210 | 173213