aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJason Helfman <jgh@FreeBSD.org>2012-05-31 16:40:30 +0000
committerJason Helfman <jgh@FreeBSD.org>2012-05-31 16:40:30 +0000
commit375b16d206680c555ec39e9ad3c74ec43efb1f36 (patch)
tree6ed87b0fcb639405146f7cee106d24391f1f8c05
parent58183419a88ba8e349c5792d0f7584b666331940 (diff)
downloadports-375b16d206680c555ec39e9ad3c74ec43efb1f36.tar.gz
ports-375b16d206680c555ec39e9ad3c74ec43efb1f36.zip
- better define ranges for a8864f8f-aa9e-11e1-a284-0023ae8e59f0 and add another vendor note
Notes
Notes: svn path=/head/; revision=297883
-rw-r--r--security/vuxml/vuln.xml16
1 files changed, 11 insertions, 5 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 4f447d426e72..2ac500bfd140 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -57,17 +57,22 @@ Note: Please add new entries to the beginning of this file.
<affects>
<package>
<name>postgresql-server</name>
- <range><lt>8.3.18_1</lt></range>
- <range><lt>8.4.11_1</lt></range>
- <range><lt>9.0.7_2</lt></range>
- <range><lt>9.1.3_1</lt></range>
- <range><lt>9.2.b1_1</lt></range>
+ <range><gt>8.3.*</gt><lt>8.3.18_1</lt></range>
+ <range><gt>8.4.*</gt><lt>8.4.11_1</lt></range>
+ <range><gt>9.0.*</gt><lt>9.0.7_2</lt></range>
+ <range><gt>9.1.*</gt><lt>9.1.3_1</lt></range>
+ <range><gt>9.2.*</gt><lt>9.2.b1_1</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>The PostgreSQL Global Development Group reports:</p>
<blockquote cite="http://www.postgresql.org/about/news/1397/">
+ <p>Today the PHP, OpenBSD and FreeBSD communities announced updates to
+ patch a security hole involving their crypt() hashing algorithms. This
+ issue is described in CVE-2012-2143. This vulnerability also affects a
+ minority of PostgreSQL users, and will be fixed in an update release on
+ June 4, 2012.</p>
<p>Affected users are those who use the crypt(text, text) function
with DES encryption in the optional pg_crypto module. Passwords
affected are those that contain characters that cannot be
@@ -85,6 +90,7 @@ Note: Please add new entries to the beginning of this file.
<dates>
<discovery>2012-05-30</discovery>
<entry>2012-05-30</entry>
+ <modified>2012-05-31</modified>
</dates>
</vuln>