Bug 214941

Summary:	ftp/wget - missing vuxml entry
Product:	Ports & Packages	Reporter:	Sevan Janiyan <venture37>
Component:	Individual Port(s)	Assignee:	Vasil Dimov <vd>
Status:	Closed FIXED
Severity:	Affects Some People	CC:	ports-secteam
Priority:	---	Keywords:	security
Version:	Latest	Flags:	bugzilla: maintainer-feedback? (vd)
Hardware:	Any
OS:	Any

Description Sevan Janiyan 2016-11-30 02:01:48 UTC

CVE-2016-7098
https://legalhackers.com/advisories/Wget-Exploit-ACL-bypass-RaceCond-CVE-2016-7098.html

Comment 1 commit-hook freebsd_committer

2016-11-30 12:07:44 UTC

A commit references this bug:

Author: vd
Date: Wed Nov 30 12:07:31 UTC 2016
New revision: 427421
URL: https://svnweb.freebsd.org/changeset/ports/427421

Log:
  Document ftp/wget's Access List Bypass / Race Condition vulnerability

  PR:		214941
  Submitted by:	Sevan Janiyan <venture37@geeklan.co.uk>
  Security:	CVE-2016-7098

Changes:
  head/security/vuxml/vuln.xml

Comment 2 Vasil Dimov freebsd_committer

2016-11-30 12:09:02 UTC

Added, thanks!