From nobody Wed Feb 11 07:49:42 2026 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4f9rDk70Srz6S8nq for ; Wed, 11 Feb 2026 07:49:42 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4f9rDk6PhXz3tt8 for ; Wed, 11 Feb 2026 07:49:42 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1770796182; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=R+3dUJbcDtgX1MPhIEhzzMoyGRpdA9GFhnvgE27GIqc=; b=xFGF84nrZuH7ddJJ3kgv82dIWjP7M1ihu8eq2U3qzCAdP36ZohSqgKX8phXqrgkM9qQszN NPeYhGfMA5TxQATQmFi23vXuhpmh1oLhzl6zy/lgGq6IeFsHObpJAQvH006nvU0GICrHpz sv7n8lsEXTuTI6CtvokeLO0AI1SKIWHD3RMFIfXPYTD5QsMunsufRcBFtN1dplClARgIxc XkUDGONkpqjhJP4hUixZB5JWrwFsZs8NIZV/PTWwHb85kNConL6hqniuKJEWwBM1Q+I/0y ZhtJQUG543TEzv6AkYVVWXXY4o3d5WDyXsGH2cQAEqtj6FWONVfBkou99Yh3uw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1770796182; a=rsa-sha256; cv=none; b=FRrmGYyiGE369miodQ+HT32+HwJTOxmYZVxYj+AE7eXR+ebAX464Cw4b8gVTvOhbBfqYoC REpxj3oJfhBPLkrpZdLP/0cwyalvKLI6PPCBwz+cHMA1B4HjIGcqZombkIrtWD/Vl2Lz/l gOSWB3dE3QpvWgHiqlgdZ7hwh5wpI65lfvrwQsConUoOKsELPfm0p1iPUmFJim4ZtIMsg/ 2UqCHT+V2D/Al5mqWRBUAj8jSKJ6Dm+7SJ/Sf1308VgufvRy+PftqTdF8OAE5NICgSTXnf EHp5pTHU0LJVZHV/XP8FZw8BNmQkrVpGfAoW+NKQD4DYDrXrfNteXzMloqn0eQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1770796182; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=R+3dUJbcDtgX1MPhIEhzzMoyGRpdA9GFhnvgE27GIqc=; b=P6QzQWFnMjkRKVJMCwKKAXdv3I719ilO4lv39Fom9TXzNWeiUdvuI5JvPEXx9JVHcNa7xM mX4B035FciKPeGPnE8WYN6ybFY3WwNNEh9OB0cv3/5td7nEdezyqiflRdmA/MLnyPpYGvG obxPh+C4QjYjNHh3zfWf6FQK7XIXyp/Fbgi+7g10qT5tpobjAtMvCIQSpJJKdunUs2u+H4 cRo3nR/IC0F0z42K4NJekTt9+cEs16Fjfy9vUuJxuifemGusPpwIW3g2lmW2Ru0QikH1wB IIRqAdnNcPZpwluC1d/XuEJzBnkl/1fnTWx1sC+Tz75il2g0+cTRb96Sx6w6TQ== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4f9rDk604ZzhLs for ; Wed, 11 Feb 2026 07:49:42 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 3d478 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Wed, 11 Feb 2026 07:49:42 +0000 To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Matthias Fechner Subject: git: e8dbbbac7eac - main - security/vuxml: document Gitlab vulnerabilities List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-all@freebsd.org Sender: owner-dev-commits-ports-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: mfechner X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: e8dbbbac7eacb6a4e30d91e571fdc5ae3ecec35f Auto-Submitted: auto-generated Date: Wed, 11 Feb 2026 07:49:42 +0000 Message-Id: <698c3496.3d478.1a6b0f33@gitrepo.freebsd.org> The branch main has been updated by mfechner: URL: https://cgit.FreeBSD.org/ports/commit/?id=e8dbbbac7eacb6a4e30d91e571fdc5ae3ecec35f commit e8dbbbac7eacb6a4e30d91e571fdc5ae3ecec35f Author: Matthias Fechner AuthorDate: 2026-02-11 07:46:32 +0000 Commit: Matthias Fechner CommitDate: 2026-02-11 07:46:32 +0000 security/vuxml: document Gitlab vulnerabilities --- security/vuxml/vuln/2026.xml | 57 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 57 insertions(+) diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml index 4340808b5599..64e1378fa597 100644 --- a/security/vuxml/vuln/2026.xml +++ b/security/vuxml/vuln/2026.xml @@ -1,3 +1,60 @@ + + Gitlab -- vulnerabilities + + +gitlab-ce +gitlab-ee +18.8.018.8.4 +18.7.018.7.4 +8.0.018.6.6 + + + + +

Gitlab reports:

+
+

Incomplete Validation issue in Web IDE impacts GitLab CE/EE

+

Denial of Service issue in GraphQL introspection impacts GitLab CE/EE

+

Denial of Service issue in JSON validation middleware impacts GitLab CE/EE

+

Cross-site Scripting issue in Code Flow impacts GitLab CE/EE

+

HTML Injection issue in test case titles impacts GitLab CE/EE

+

Denial of Service issue in Markdown processor impacts GitLab CE/EE

+

Denial of Service issue in Markdown Preview impacts GitLab CE/EE

+

Denial of Service issue in dashboard impacts GitLab EE

+

Server-Side Request Forgery issue in Virtual Registry impacts GitLab EE

+

Improper Validation issue in diff parser impacts GitLab CE/EE

+

Server-Side Request Forgery issue in Git repository import impacts GitLab CE/EE

+

Authorization Bypass issue in iterations API impacts GitLab EE

+

Missing Authorization issue in GLQL API impacts GitLab CE/EE

+

Stored HTML Injection issue in project label impacts GitLab CE/EE

+

Authorization Bypass issue in Pipeline Schedules API impacts GitLab CE/EE

+
+ + + + CVE-2025-7659 + CVE-2025-8099 + CVE-2026-0958 + CVE-2025-14560 + CVE-2026-0595 + CVE-2026-1458 + CVE-2026-1456 + CVE-2026-1387 + CVE-2025-12575 + CVE-2026-1094 + CVE-2025-12073 + CVE-2026-1080 + CVE-2025-14592 + CVE-2026-1282 + CVE-2025-14594 + https://about.gitlab.com/releases/2026/02/10/patch-release-gitlab-18-8-4-released/ + + + 2026-02-10 + 2026-02-11 + + + FreeBSD -- blocklistd(8) socket leak