mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2025-01-07 06:40:06 +00:00
Code Issues Releases Activity

www/rt50: Fix vulnerabilities

Browse Source 
The following issues are addressed with these security updates:
  - RT is vulnerable to unvalidated email headers in incoming email and the
    mail-gateway REST interface.
    This vulnerability is assigned CVE-2023-41259.
  - RT is vulnerable to information leakage via response messages returned from
    requests sent via the mail-gateway REST interface.
    This vulnerability is assigned CVE-2023-41260.
  - RT 5.0 is vulnerable to information leakage via transaction searches made by
    authenticated users in the transaction query builder.
    This vulnerability is assigned CVE-2023-45024.
  - RT 5.0 can reveal information about data on various RT objects in errors and
    other response messages to REST 2 requests.
This commit is contained in:
Mikael Urankar 2023-10-04 09:57:55 +02:00
parent c2ce69e2f5
commit 9f8d5a5f33
2 changed files with 1119 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
www/rt50/Makefile
View File

@ -1,5 +1,6 @@
PORTNAME= rt
DISTVERSION= 5.0.4
PORTREVISION= 1
CATEGORIES= www
MASTER_SITES= http://download.bestpractical.com/pub/rt/release/
PKGNAMESUFFIX= 50

1118
www/rt50/files/patch-vuln-2023-09-26 Normal file
View File

File diff suppressed because it is too large Load Diff