cpet/freebsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update PHP entry to include the vulnerable version so the entry is

Browse Source 
correct for when PHP is updated in ports (yes it's being worked on),
or for people who upgrade "manually".

With hat:	secteam
Requested by:   several
This commit is contained in:
Simon L. B. Nielsen 2007-05-10 17:31:49 +00:00
parent 947b7a739d
commit 4e0a6f6ea4
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=191536
2 changed files with 33 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
security/vuxml/Makefile
View File

@ -83,4 +83,8 @@ tidy:
newentry:
@${SH} ${FILESDIR}/newentry.sh "${VUXML_FILE}"
eddie:
scp "${VUXML_FILE}" eddie.nitro.dk:/FreeBSD/work/vuxml/
ssh eddie.nitro.dk make -C /FreeBSD/sec/vuxml-web/freebsd VUXML=/FreeBSD/work/vuxml/vuln.xml TOPDEST=/home/simon/public_html/vuxml all install
.include <bsd.port.mk>

31
security/vuxml/vuln.xml
View File

@ -38,13 +38,39 @@ Note: Please add new entries to the beginning of this file.
<topic>php -- multiple vulnerabilities</topic>
<affects>
<package>
<name>php5-imap</name>
<name>php5-odbc</name>
<name>php5-session</name>
<name>php5-shmop</name>
<name>php5-sqlite</name>
<name>php5-wddx</name>
<name>php5</name>
<range><lt>5.2.2</lt></range>
</package>
<package>
<name>php4-odbc</name>
<name>php4-session</name>
<name>php4-shmop</name>
<name>php4-wddx</name>
<name>php4</name>
<range><lt>4.4.7</lt></range>
</package>
<package>
<name>mod_php4-twig</name>
<name>mod_php4</name>
<name>mod_php5</name>
<name>mod_php</name>
<name>php4-cgi</name>
<name>php4-cli</name>
<name>php5</name>
<name>php4-dtc</name>
<name>php4-horde</name>
<name>php4-nms</name>
<name>php5-cgi</name>
<name>php5-cli</name>
<range><gt>0</gt></range>
<name>php5-dtc</name>
<name>php5-horde</name>
<name>php5-nms</name>
<range><ge>0</ge></range>
</package>
</affects>
<description>
@ -100,6 +126,7 @@ Note: Please add new entries to the beginning of this file.
<dates>
<discovery>2007-05-03</discovery>
<entry>2007-05-07</entry>
<modified>2007-05-10</modified>
</dates>
</vuln>