From nobody Wed Aug 23 06:32:32 2023 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4RVxGS6Pfpz4r9dp; Wed, 23 Aug 2023 06:32:32 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4RVxGS5wHdz4PvV; Wed, 23 Aug 2023 06:32:32 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1692772352; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=+5hI+Y2vG5apoPR4ryug1bqSbNKnwLvYeZ+o3Oh8LZE=; b=ZEN+JCrb8UHSUPY91HVX4f0S3O9jtcd3CCIMezTaH5Pm1xzdpgc37B0P+s+VUcTI5HNTJQ adOER/8UJxJvK4PvUd2GYw2MFij/ty3G9OVoypZJvsP5vhAQIWICRnzUQlTlOzCxpg430E JrOTcJQZyhAZ8fPAYsFcqrbrPImYlEoj4KwZgOx+u4jbQ3OBT/WR4ZZ0gPTNqlFaUUrJsk PoOsTdplZodxrMKReWgA8IHTw9la6ZSAtwo8nGf16Di5aTRykYWbu0/91+li3LlHt/u4dM Vl0boN5ifiu/yjPB9iMTK6AaO/nlNmgrVdlMvSvNz8H5qMP75eQgT6PBSIrmBg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1692772352; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=+5hI+Y2vG5apoPR4ryug1bqSbNKnwLvYeZ+o3Oh8LZE=; b=j6q726LEYFQFUQR/SP8ZbMmNm1HeuB6f/n374Za47gHg0caCRBozRLnT8EjKGDT0igvbsT FC79VVio8lO0Z+iKdulUWEd2OoOQymPm9FfAfivc19Grn2w7t/QwrDn2UNxsZoaqFuweQj Oh+qMxk2w/1lQ+rLsrDe+GPdu3cE31+S7hS+mKy4G+1vTsvsr0kmNAyxIVVtmtsFoVQN1U Y5V49tM9SdmVaDYMGJa9E0kHLZVfdbnrQ0iAjRWZIHi8nL6igow6fMrEn5jfZaoyQpNB0P GMa56FEUQaEkc2dxCZpluGJ+85tCRuPOmjCQ3D5zv2CaJdsW6L2AM8njPz+9mw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1692772352; a=rsa-sha256; cv=none; b=xdPIXQbxdnNjeH7KVir6/SxdYwp3Ycv037wwFAOJU5hC/aBm31F8U0kqx8gP2RGcCBNQf8 sGl0Ty3qPGwpAieHfnKkvMyqbGPdg1kPjgqEP2UfaiDKhORD+evghIYTD4Rwwsw/HKKboS VXAYcGsIBT8pKwDyA/IYd2KvxY+F35+rl7v07HDoJPfjORHMm0JQJEXcC3ax425WGXT1Gh Uzoup7h1p35EanhVi0VJv5xpd1D+U5L0zzSFCwVFw9+XsFB1Yv7p1r3VJAuckrRRRx4+Kv bx34djbcnLLZi+UifKeBo3DR5EOwnnqnP4/wbD2WxvCgnoIvLTfwcZ/eUHhhjg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4RVxGS4z6wzbR3; Wed, 23 Aug 2023 06:32:32 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.17.1/8.17.1) with ESMTP id 37N6WWdt029812; Wed, 23 Aug 2023 06:32:32 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.17.1/8.17.1/Submit) id 37N6WW8V029809; Wed, 23 Aug 2023 06:32:32 GMT (envelope-from git) Date: Wed, 23 Aug 2023 06:32:32 GMT Message-Id: <202308230632.37N6WW8V029809@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Florian Smeets Subject: git: 5a4fbec7d6a9 - main - security/vuxml: add phpmyfaq < 3.1.16 List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-main@freebsd.org X-BeenThere: dev-commits-ports-main@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: flo X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 5a4fbec7d6a92ca5c0232f2d798506ac337f4743 Auto-Submitted: auto-generated The branch main has been updated by flo: URL: https://cgit.FreeBSD.org/ports/commit/?id=5a4fbec7d6a92ca5c0232f2d798506ac337f4743 commit 5a4fbec7d6a92ca5c0232f2d798506ac337f4743 Author: Florian Smeets AuthorDate: 2023-08-23 06:28:42 +0000 Commit: Florian Smeets CommitDate: 2023-08-23 06:32:25 +0000 security/vuxml: add phpmyfaq < 3.1.16 --- security/vuxml/vuln/2023.xml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml index b0135e1f951a..af7074dadc10 100644 --- a/security/vuxml/vuln/2023.xml +++ b/security/vuxml/vuln/2023.xml @@ -1,3 +1,33 @@ + + phpmyfaq -- multiple vulnerabilities + + + phpmyfaq-php80 + phpmyfaq-php81 + phpmyfaq-php82 + phpmyfaq-php83 + 3.1.16 + + + + +

phpmyfaq developers report:

+
+

Cross Site Scripting vulnerability

+

CSV injection vulnerability

+
+ + + + https://huntr.dev/bounties/e891dcbc-2092-49d3-9518-23e37187a5ea/ + https://huntr.dev/bounties/36149a42-cbd5-445e-a371-e351c899b189/ + + + 2023-07-16 + 2023-08-23 + + + chromium -- multiple vulnerabilities