git: 74b07528d393 - main - security/vuxml: document archivers/ha vulnerabilities

Thu Sep 30 02:12:55 UTC 2021

The branch main has been updated by ak:

URL: https://cgit.FreeBSD.org/ports/commit/?id=74b07528d3937bc3c267c0bbb55abda453c51665

commit 74b07528d3937bc3c267c0bbb55abda453c51665
Author:     Alex Kozlov <ak at FreeBSD.org>
AuthorDate: 2021-09-30 02:02:47 +0000
Commit:     Alex Kozlov <ak at FreeBSD.org>
CommitDate: 2021-09-30 02:02:47 +0000

    security/vuxml: document archivers/ha vulnerabilities
---
 security/vuxml/vuln-2021.xml | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/security/vuxml/vuln-2021.xml b/security/vuxml/vuln-2021.xml
index fe47555b461f..76690fae5142 100644
--- a/security/vuxml/vuln-2021.xml
+++ b/security/vuxml/vuln-2021.xml
@@ -1,3 +1,30 @@
+  <vuln vid="5436f9a2-2190-11ec-a90b-0cc47a49470e">
+    <topic>ha -- Directory traversals</topic>
+    <affects>
+      <package>
+	<name>ha</name>
+	<range><lt>0.999b_2</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">
+	<p>Alexander Cherepanov reports:</p>
+	<blockquote cite="http://www.openwall.com/lists/oss-security/2015/01/18/8">
+	  <p>Version 0.999b and older of ha archiver is susceptible to directory
+	  traversal vulnerabilities via absolute and relative paths.</p>
+	</blockquote>
+      </body>
+    </description>
+    <references>
+      <cvename>CVE-2015-1198</cvename>
+      <url>http://www.openwall.com/lists/oss-security/2015/01/18/8</url>
+    </references>
+    <dates>
+      <discovery>2015-01-18</discovery>
+      <entry>2021-09-30</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="730e922f-20e7-11ec-a574-080027eedc6a">
     <topic>nexus2-oss -- Apache ActiveMQ JMX vulnerability</topic>
     <affects>
