freebsd-ports/databases/mysql51-client/pkg-message
Mark Felder 77261bbea0 Bump PORTREVISION of the client and add pkg-message to warn about
CVE-2015-3152 which will not get patched

Security:	CVE-2015-3152
Security:	36bd352d-299b-11e5-86ff-14dae9d210b8
2015-07-18 21:11:14 +00:00

15 lines
491 B
Text

* * * * * * * * * * * * * * * * * * * * * * * *
Please be aware the database client is vulnerable
to CVE-2015-3152 - SSL Downgrade aka "BACKRONYM".
You may find more information at the following URL:
http://www.vuxml.org/freebsd/36bd352d-299b-11e5-86ff-14dae9d210b8.html
Although this database client is not listed as
"affected", it is vulnerable and will not be
receiving a patch. Please take note of this when
deploying this software.
* * * * * * * * * * * * * * * * * * * * * * * *