Page MenuHomeFreeBSD

graphics/png: Document vulnerability in 1.6.18 and earlier
ClosedPublic

Authored by brnrd on Nov 15 2015, 11:08 AM.
Tags
None
Referenced Files
Unknown Object (File)
Jan 13 2024, 1:15 PM
Unknown Object (File)
Jan 5 2024, 10:31 PM
Unknown Object (File)
Dec 25 2023, 5:17 PM
Unknown Object (File)
Dec 20 2023, 12:49 AM
Unknown Object (File)
Dec 17 2023, 10:03 AM
Unknown Object (File)
Dec 9 2023, 8:20 AM
Unknown Object (File)
Dec 8 2023, 11:41 AM
Unknown Object (File)
Nov 23 2023, 5:23 PM
Subscribers
None

Details

Summary

Proposed commit log

Document vulnerability of libpng

DifferentialRevision:	https://reviews.freebsd.org/D4164
ReviewedBy:	koobs (mentor), feld (ports-secteam)
ApprovedBy:	
Security:	CVE-2015-8126
Test Plan
  • make validate (vuxml)
/bin/sh /usr/ports/security/vuxml/files/tidy.sh "/usr/ports/security/vuxml/files/tidy.xsl" "/usr/ports/security/vuxml/vuln.xml" > "/usr/ports/security/vuxml/vuln.xml.tidy"
>>> Validating...
/usr/local/bin/xmllint --valid --noout /usr/ports/security/vuxml/vuln.xml
>>> Successful.
Checking if tidy differs...
... seems okay
Checking for space/tab...
... seems okay
/usr/local/bin/python2.7 /usr/ports/security/vuxml/files/extra-validation.py /usr/ports/security/vuxml/vuln.xml

Diff Detail

Repository
rP FreeBSD ports repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

brnrd retitled this revision from to graphics/png: Update to 1.6.19.
brnrd updated this object.
brnrd edited the test plan for this revision. (Show Details)
brnrd added reviewers: koobs, feld.
brnrd edited the test plan for this revision. (Show Details)

vuxml entry is still valid/required

Port was already updated, vuxml entry still needs to be added

brnrd retitled this revision from graphics/png: Update to 1.6.19 to graphics/png: Document vulnerability in 1.6.18 and earlier.Nov 15 2015, 11:58 AM
brnrd updated this object.
brnrd edited the test plan for this revision. (Show Details)
koobs edited edge metadata.

LGTM.

In future for the proposed commit log section, please put spaces between

ReviewedBy:
ApprovedBy:

They don;t cause any arc/phabricator barfing, only a "Differential Revision:" line does

This revision is now accepted and ready to land.Nov 15 2015, 2:52 PM
This revision was automatically updated to reflect the committed changes.