FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The last vuln.xml file processed by FreshPorts is:

nothing found there

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
5b6bc863-89dc-11ea-af8b-00155d0a0200ceph14 -- multiple security issues

RedHat reports:

ceph: secure mode of msgr2 breaks both confidentiality and integrity aspects for long-lived sessions.

ceph: header-splitting in RGW GetObject has a possible XSS.

Discovery 2020-04-07
Entry 2020-04-14
gt 14.1.1 lt 14.2.9

f20eb9a4-dfea-11ea-a9b8-9c5c8e84d621ceph14 -- HTTP header injection via CORS ExposeHeader tag

Red Hat bugzilla reports:

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made.

Discovery 2020-05-27
Entry 2020-08-16
lt 14.2.11