mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-03 01:23:49 +00:00
Code Issues Releases Activity

Document Jenkins Security Advisory 2019-08-28

Browse Source 
Sponsored by:	The FreeBSD Foundation
This commit is contained in:
Li-Wen Hsu 2019-08-28 15:36:03 +00:00
parent e4d88a10b0
commit 62645eebc1
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=510071
1 changed files with 35 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
security/vuxml/vuln.xml
View File

@ -58,6 +58,41 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="7a7891fc-6318-447a-ba45-31d525ec11a0">
<topic>jenkins -- multiple vulnerabilities</topic>
<affects>
<package>
<name>jenkins</name>
<range><le>2.191</le></range>
</package>
<package>
<name>jenkins-lts</name>
<range><le>2.176.2</le></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>Jenkins Security Advisory:</p>
<blockquote cite="https://jenkins.io/security/advisory/2019-08-28/">
<h1>Description</h1>
<h5>(Medium) SECURITY-1453 / CVE-2019-10383</h5>
<p>Stored XSS vulnerability in update center</p>
<h5>(High) SECURITY-1491 / CVE-2019-10384</h5>
<p>CSRF protection tokens for anonymous users did not expire in some circumstances</p>
</blockquote>
</body>
</description>
<references>
<cvename>CVE-2019-10383</cvename>
<cvename>CVE-2019-10384</cvename>
<url>https://jenkins.io/security/advisory/2019-08-28/</url>
</references>
<dates>
<discovery>2019-08-28</discovery>
<entry>2019-08-28</entry>
</dates>
</vuln>
<vuln vid="0f31b4e9-c827-11e9-9626-589cfc01894a">
<topic>Mozilla -- Stored passwords in 'Saved Logins' can be copied without master password entry</topic>
<affects>