CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

security/linux-rl9-libksba1.5.1

Crypto library based on code used in GnuPG (Rocky Linux 9.8)

2
unaddressed
0
VuXML only, still affected
0
fixed
Maintainer
emulation@FreeBSD.org
Packages
linux-rl9-libksba 1.5.1
Upstream
up to date
CPE
gnupg:libksba from the port
WWW
https://www.gnupg.org/software/libgcrypt/index.html
Links
cgit · VuXML

Unaddressed (2) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2022-35159.8published 2023-01-12

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.

CVE-2022-476299.8published 2022-12-20

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (2)

Gleb Popov (arrowd) · 1.5.1
linux-rl9*: Stop installing build-id files

- They complicate pkg-plist manipulations
- They increase the package's size
- They are used for debugging and it is unlikely that someone would debug
  binaries coming from Linux RPMs
cebd2ae6f1
Dima Panov (fluffy) · 1.5.1
*/*: Update Rocky Linux 9 packages to 9.5 release (+)

While here, hook up missed packages to resolve all 'not found' libraries

Sponsored by:	Future Crew, LLC
433660ccf0