FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-24 21:00:48 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
0d369972-d4ba-11e7-bfca-005056925db4	borgbackup -- remote users can override repository restrictions BorgBackup reports: Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers. A user able to access a remote Borg SSH server is able to circumvent access controls post-authentication. Affected releases: 1.1.0, 1.1.1, 1.1.2. Releases 1.0.x are NOT affected. Discovery 2017-11-27 Entry 2017-11-29 py34-borgbackup py35-borgbackup py36-borgbackup ge 1.1.0 lt 1.1.3 CVE-2017-15914 https://github.com/borgbackup/borg/blob/1.1.3/docs/changes.rst#version-113-2017-11-27

VuXML ID

Description

0d369972-d4ba-11e7-bfca-005056925db4

borgbackup -- remote users can override repository restrictions

BorgBackup reports:

Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers. A user able to access a remote Borg SSH server is able to circumvent access controls post-authentication. Affected releases: 1.1.0, 1.1.1, 1.1.2. Releases 1.0.x are NOT affected.

Discovery 2017-11-27
Entry 2017-11-29
py34-borgbackup
py35-borgbackup
py36-borgbackup

ge 1.1.0 lt 1.1.3

CVE-2017-15914
https://github.com/borgbackup/borg/blob/1.1.3/docs/changes.rst#version-113-2017-11-27