Bug 295866 - net-mgmt/libsmi: Fix CVE-2010-2891
Summary: net-mgmt/libsmi: Fix CVE-2010-2891
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Kousuke Kannagi
URL: https://www.cve.org/CVERecord?id=CVE-...
Keywords:
Depends on:
Blocks:
 
Reported: 2026-06-05 05:44 UTC by Kousuke Kannagi
Modified: 2026-06-14 22:34 UTC (History)
3 users (show)

See Also:
saper: maintainer-feedback+
osa: maintainer-feedback+
mce: maintainer-feedback? (fluffy)
mce: merge-quarterly+

Attachments
Fix CVE-2010-2891 (1.44 KB, patch)
2026-06-05 05:44 UTC, Kousuke Kannagi 		no flags Details | Diff
Add libsmi 0.4.8 vulnerability (1.73 KB, patch)
2026-06-08 22:49 UTC, Kousuke Kannagi 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Kousuke Kannagi freebsd_committer freebsd_triage 2026-06-05 05:44:35 UTC 
Created attachment 271504 [details]
Fix CVE-2010-2891
Comment 1 Marcin Cieślak 2026-06-08 11:05:05 UTC 
Thank you, I think we can commit this!
Comment 2 Sergey A. Osokin freebsd_committer freebsd_triage 2026-06-08 21:45:52 UTC 
Hi Kousuke,
thanks for the patch.

Do we have CVE-2010-2891 in our security/vuxml database?  And if not, could you please create that to update the database.

Thank you.
Comment 3 Kousuke Kannagi freebsd_committer freebsd_triage 2026-06-08 22:49:19 UTC 
Created attachment 271635 [details]
Add libsmi 0.4.8 vulnerability

I created a patch.
Comment 4 commit-hook freebsd_committer freebsd_triage 2026-06-14 21:54:37 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=a90e0c311e44e5916df1d0b26f288bac063d1688

commit a90e0c311e44e5916df1d0b26f288bac063d1688
Author:     Kousuke Kannagi <mce@FreeBSD.org>
AuthorDate: 2026-06-14 21:49:49 +0000
Commit:     Kousuke Kannagi <mce@FreeBSD.org>
CommitDate: 2026-06-14 21:53:08 +0000

    security/vuxml: Add libsmi 0.4.8 vulnerability

    PR:             295866
    Approved by:    osa (mentor)

 security/vuxml/vuln/2026.xml | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
Comment 5 commit-hook freebsd_committer freebsd_triage 2026-06-14 22:05:39 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=e5ff44e8c35c7b8b65e4ba4ab6fdf1da7a1ee5ab

commit e5ff44e8c35c7b8b65e4ba4ab6fdf1da7a1ee5ab
Author:     Kousuke Kannagi <mce@FreeBSD.org>
AuthorDate: 2026-06-05 05:40:08 +0000
Commit:     Kousuke Kannagi <mce@FreeBSD.org>
CommitDate: 2026-06-14 22:04:17 +0000

    net-mgmt/libsmi: Fix CVE-2010-2891

    PR:             295866
    Approved by:    Marcin Cieślak <saper@saper.info> (maintainer)
    Approved by:    osa (mentor)
    MFH:            2026Q2
    Security:       CVE-2010-2891

 net-mgmt/libsmi/Makefile | 5 ++++-
 net-mgmt/libsmi/distinfo | 3 +++
 2 files changed, 7 insertions(+), 1 deletion(-)
Comment 6 commit-hook freebsd_committer freebsd_triage 2026-06-14 22:24:45 UTC 
A commit in branch 2026Q2 references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=cbc4172c1f399444cd029d7e8c81045214fa32b8

commit cbc4172c1f399444cd029d7e8c81045214fa32b8
Author:     Kousuke Kannagi <mce@FreeBSD.org>
AuthorDate: 2026-06-05 05:40:08 +0000
Commit:     Kousuke Kannagi <mce@FreeBSD.org>
CommitDate: 2026-06-14 22:23:35 +0000

    net-mgmt/libsmi: Fix CVE-2010-2891

    PR:             295866
    Approved by:    Marcin Cieślak <saper@saper.info> (maintainer)
    Approved by:    osa (mentor)
    MFH:            2026Q2
    Security:       CVE-2010-2891

    (cherry picked from commit e5ff44e8c35c7b8b65e4ba4ab6fdf1da7a1ee5ab)

 net-mgmt/libsmi/Makefile | 5 ++++-
 net-mgmt/libsmi/distinfo | 3 +++
 2 files changed, 7 insertions(+), 1 deletion(-)
Comment 7 Kousuke Kannagi freebsd_committer freebsd_triage 2026-06-14 22:34:59 UTC 
Thank you so much.