Bug 215464

Summary:	www/lynx - multiple vulnerabilites
Product:	Ports & Packages	Reporter:	Sevan Janiyan <venture37>
Component:	Individual Port(s)	Assignee:	Mark Felder <feld>
Status:	Closed FIXED
Severity:	Affects Only Me	CC:	feld, jharris, ports-secteam
Priority:	---	Keywords:	security
Version:	Latest	Flags:	jharris: maintainer-feedback+
Hardware:	Any
OS:	Any

Description Sevan Janiyan 2016-12-21 11:44:03 UTC

Vulnerable to POODLE attack
Patch https://hg.java.net/hg/solaris-userland~gate/file/bc5351dcb9ac/components/lynx/patches/02-init-openssl.patch
Vulnerable to CVE-2016-9179
Patch https://hg.java.net/hg/solaris-userland~gate/file/0a979060f73b/components/lynx/patches/05-fix-CVE-2016-9179.patch
Missing vuxml entry

Comment 1 jharris 2016-12-21 15:52:49 UTC

Approved, thanks!

Comment 2 commit-hook freebsd_committer

2017-01-09 17:15:06 UTC

A commit references this bug:

Author: feld
Date: Mon Jan  9 17:14:14 UTC 2017
New revision: 430983
URL: https://svnweb.freebsd.org/changeset/ports/430983

Log:
  Document lynx vulnerabilities

  PR:		215464
  Security:	CVE-2014-3566
  Security:	CVE-2016-9179

Changes:
  head/security/vuxml/vuln.xml

Comment 3 commit-hook freebsd_committer

2017-01-09 17:16:09 UTC

A commit references this bug:

Author: feld
Date: Mon Jan  9 17:15:11 UTC 2017
New revision: 430984
URL: https://svnweb.freebsd.org/changeset/ports/430984

Log:
  www/lynx: Patch vulnerabilities

  PR:		215464
  MFH:		2017Q1
  Security:	CVE-2014-3566
  Security:	CVE-2016-9179

Changes:
  head/www/lynx/Makefile
  head/www/lynx/files/patch-CVE-2014-3566
  head/www/lynx/files/patch-CVE-2016-9179

Comment 4 commit-hook freebsd_committer

2017-01-09 17:16:11 UTC

A commit references this bug:

Author: feld
Date: Mon Jan  9 17:15:50 UTC 2017
New revision: 430985
URL: https://svnweb.freebsd.org/changeset/ports/430985

Log:
  MFH: r430984

  www/lynx: Patch vulnerabilities

  PR:		215464
  Security:	CVE-2014-3566
  Security:	CVE-2016-9179

  Approved by:	ports-secteam (with hat)

Changes:
_U  branches/2017Q1/
  branches/2017Q1/www/lynx/Makefile
  branches/2017Q1/www/lynx/files/patch-CVE-2014-3566
  branches/2017Q1/www/lynx/files/patch-CVE-2016-9179