Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 27 Dec 2025 19:00:42 +0000
From:      Ronald Klop <ronald@FreeBSD.org>
To:        ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org
Subject:   git: d6d3e0a008fe - main - security/vuxml: MongoBleed is also in 8.0.16 and before
Message-ID:  <69502cda.36830.52d0b0ed@gitrepo.freebsd.org>

index | next in thread | raw e-mail

The branch main has been updated by ronald:

URL: https://cgit.FreeBSD.org/ports/commit/?id=d6d3e0a008fedf413465ba3b4280ee41d127a27a

commit d6d3e0a008fedf413465ba3b4280ee41d127a27a
Author:     Ronald Klop <ronald@FreeBSD.org>
AuthorDate: 2025-12-27 18:55:34 +0000
Commit:     Ronald Klop <ronald@FreeBSD.org>
CommitDate: 2025-12-27 18:55:34 +0000

    security/vuxml: MongoBleed is also in 8.0.16 and before
    
    Fixes:  a69bda1
    Fixes:  b587cd0
    Security:       CVE-2025-14847
---
 security/vuxml/vuln/2025.xml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index 126d3d71cb1a..bb133a678498 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -34,6 +34,10 @@
   <vuln vid="c1613867-df16-11f0-8870-b42e991fc52e">
     <topic>MongoDB -- Improper Handling of Length Parameter Inconsistency</topic>
     <affects>
+    <package>
+	<name>mongodb80</name>
+	<range><lt>8.0.17</lt></range>
+    </package>
     <package>
 	<name>mongodb70</name>
 	<range><lt>7.0.28</lt></range>
@@ -56,7 +60,7 @@
     <dates>
       <discovery>2025-12-19</discovery>
       <entry>2025-12-22</entry>
-      <modified>2025-12-24</modified>
+      <modified>2025-12-28</modified>
     </dates>
   </vuln>
 


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?69502cda.36830.52d0b0ed>