git: e3250a9a69e3 - main - security/vuxml: document routinator vulnerabilities
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 05 Jan 2022 14:47:57 UTC
The branch main has been updated by fernape:
URL: https://cgit.FreeBSD.org/ports/commit/?id=e3250a9a69e3275b532a8d4b1a52835a11fd4739
commit e3250a9a69e3275b532a8d4b1a52835a11fd4739
Author: Fernando Apesteguía <fernape@FreeBSD.org>
AuthorDate: 2022-01-05 14:21:52 +0000
Commit: Fernando Apesteguía <fernape@FreeBSD.org>
CommitDate: 2022-01-05 14:46:17 +0000
security/vuxml: document routinator vulnerabilities
---
security/vuxml/vuln-2022.xml | 36 ++++++++++++++++++++++++++++++++++++
1 file changed, 36 insertions(+)
diff --git a/security/vuxml/vuln-2022.xml b/security/vuxml/vuln-2022.xml
index d2a5f1dfed62..d2c6cad8ab61 100644
--- a/security/vuxml/vuln-2022.xml
+++ b/security/vuxml/vuln-2022.xml
@@ -1,3 +1,39 @@
+ <vuln vid="9c990e67-6e30-11ec-82db-b42e991fc52e">
+ <topic>routinator -- multiple vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>routinator</name>
+ <range><lt>0.10.1</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>nlnetlabs reports:</p>
+ <blockquote cite="https://nlnetlabs.nl/projects/rpki/security-advisories/">
+ <p>Release 0.10.2 contains fixes for the following issues:</p>
+ <ul>
+ <li>Medium CVE-2021-43172: Infinite length chain of RRDP
+ repositories. Credit: Koen van Hove. Date: 2021-11-09</li>
+ <li>Medium CVE-2021-43173: Hanging RRDP request.
+ Credit: Koen van Hove. Date: 2021-11-09</li>
+ <li>Medium CVE-2021-43174: gzip transfer encoding caused
+ out-of-memory crash. Credit Koen van Hove. Date: 2021-11-09</li>
+ </ul>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2021-43172</cvename>
+ <cvename>CVE-2021-43173</cvename>
+ <cvename>CVE-2021-43174</cvename>
+ <url>https://nlnetlabs.nl/projects/rpki/security-advisories/</url>
+ </references>
+ <dates>
+ <discovery>2021-11-09</discovery>
+ <entry>2022-01-05</entry>
+ </dates>
+ </vuln>
+
<vuln vid="9eeccbf3-6e26-11ec-bb10-3065ec8fd3ec">
<topic>chromium -- multiple vulnerabilities</topic>
<affects>