Bug 212275 - security/openssh-portable - missing vuxml entries
Summary: security/openssh-portable - missing vuxml entries
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Bryan Drewery
URL:
Keywords: needs-patch, security
Depends on:
Blocks:
 
Reported: 2016-08-30 23:58 UTC by Sevan Janiyan
Modified: 2016-09-01 20:21 UTC (History)
1 user (show)

See Also:
bugzilla: maintainer-feedback? (bdrewery)


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sevan Janiyan 2016-08-30 23:58:08 UTC
CVE-2015-8325
CVE-2016-6210
http://www.openssh.com/txt/release-7.3
Comment 1 Bryan Drewery freebsd_committer freebsd_triage 2016-08-31 00:02:13 UTC
Woops, thanks for spotting these.  Can you write a patch?   It's pretty easy.
cd security/vuxml && make newentry
then edit it
Comment 2 Bryan Drewery freebsd_committer freebsd_triage 2016-09-01 20:21:08 UTC
Fixed, thanks.
Comment 3 commit-hook freebsd_committer freebsd_triage 2016-09-01 20:21:56 UTC
A commit references this bug:

Author: bdrewery
Date: Thu Sep  1 20:21:01 UTC 2016
New revision: 421244
URL: https://svnweb.freebsd.org/changeset/ports/421244

Log:
  Document OpenSSH CVE-2015-8325 and CVE-2016-6210 fixed in OpenSSH 7.3p1.

  PR:		212275
  Reported by:	<Sevan Janiyan> venture37@geeklan.co.uk
  Security:	CVE-2015-8325
  Security:	CVE-2016-6210

Changes:
  head/security/vuxml/vuln.xml