svn commit: r474928 - head/security/vuxml

Thu Jul 19 06:44:47 UTC 2018

Author: mfechner
Date: Thu Jul 19 06:44:46 2018
New Revision: 474928
URL: https://svnweb.freebsd.org/changeset/ports/474928

Log:
  Document gitlab < 11.0.4 vulnerability.
  
  Reviewed by:	swills (mentor)
  Approved by:	swills (mentor)
  Differential Revision:	https://reviews.freebsd.org/D16317

Modified:
  head/security/vuxml/vuln.xml

Modified: head/security/vuxml/vuln.xml
==============================================================================

--- head/security/vuxml/vuln.xml	Thu Jul 19 06:27:32 2018	(r474927)
+++ head/security/vuxml/vuln.xml	Thu Jul 19 06:44:46 2018	(r474928)
@@ -179,6 +179,35 @@ Notes:
     </dates>
   </vuln>
 
+  <vuln vid="8fc615cc-8a66-11e8-8c75-d8cb8abf62dd">
+    <topic>Gitlab -- Remote Code Execution Vulnerability in GitLab Projects Import</topic>
+    <affects>
+      <package>
+	<name>gitlab-ce</name>
+	<name>gitlab</name>
+	<range><ge>11.0.0</ge><lt>11.0.4</lt></range>
+	<range><ge>10.8.0</ge><lt>10.8.6</lt></range>
+	<range><ge>8.9.0</ge><lt>10.7.7</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">
+	<p>Gitlab reports:</p>
+	<blockquote cite="https://about.gitlab.com/2018/07/17/critical-security-release-gitlab-11-dot-0-dot-4-released/">
+	  <p>Remote Code Execution Vulnerability in GitLab Projects Import</p>
+	</blockquote>
+      </body>
+    </description>
+    <references>
+      <cvename>CVE-2018-14364</cvename>
+      <url>https://about.gitlab.com/2018/07/17/critical-security-release-gitlab-11-dot-0-dot-4-released/</url>
+    </references>
+    <dates>
+      <discovery>2018-07-17</discovery>
+      <entry>2018-07-18</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="ef013039-89cd-11e8-84e9-00e04c1ea73d">
     <topic>typo3 -- multiple vulnerabilities</topic>
     <affects>
