Date: Fri, 19 Jan 2018 12:44:12 +0000 (UTC) From: Bernard Spil <brnrd@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r459408 - head/security/vuxml Message-ID: <201801191244.w0JCiC37090722@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: brnrd Date: Fri Jan 19 12:44:12 2018 New Revision: 459408 URL: https://svnweb.freebsd.org/changeset/ports/459408 Log: security/vuxml: Document 2018Q1 Oracle MySQL vulns Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Fri Jan 19 12:33:27 2018 (r459407) +++ head/security/vuxml/vuln.xml Fri Jan 19 12:44:12 2018 (r459408) @@ -58,6 +58,113 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="e3445736-fd01-11e7-ac58-b499baebfeaf"> + <topic>MySQL -- multiple vulnerabilities</topic> + <affects> + <package> + <name>mariadb55-server</name> + <range><lt>5.5.59</lt></range> + </package> + <package> + <name>mariadb100-server</name> + <range><lt>10.0.34</lt></range> + </package> + <package> + <name>mariadb101-server</name> + <range><lt>10.1.31</lt></range> + </package> + <package> + <name>mariadb102-server</name> + <range><lt>10.2.13</lt></range> + </package> + <package> + <name>mysql55-server</name> + <range><lt>5.5.59</lt></range> + </package> + <package> + <name>mysql56-server</name> + <range><lt>5.6.39</lt></range> + </package> + <package> + <name>mysql57-server</name> + <range><lt>5.7.21</lt></range> + </package> + <package> + <name>percona55-server</name> + <range><lt>5.5.59</lt></range> + </package> + <package> + <name>percona56-server</name> + <range><lt>5.6.39</lt></range> + </package> + <package> + <name>percona57-server</name> + <range><lt>5.7.21</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Oracle reports:</p> + <blockquote cite="http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixMSQL">; + <p>Not all vulnerabilities are relevant for all flavors/versions of the + servers and clients</p> + <ul> + <li>Vulnerability allows low privileged attacker with network access + via multiple protocols to compromise MySQL Server. Successful attacks + of this vulnerability can result in unauthorized ability to cause a + hang or frequently repeatable crash (complete DOS) of MySQL Server. + GIS: CVE-2018-2573, DDL CVE-2018-2622, Optimizer: CVE-2018-2640, + CVE-2018-2665, CVE-2018-2668, Security:Privileges: CVE-2018-2703, + Partition: CVE-2018-2562.</li> + <li>Vulnerability allows high privileged attacker with network access + via multiple protocols to compromise MySQL Server. Successful attacks + of this vulnerability can result in unauthorized ability to cause a + hang or frequently repeatable crash (complete DOS) of MySQL Server. + InnoDB: CVE-2018-2565, CVE-2018-2612 DML: CVE-2018-2576, + CVE-2018-2646, Stored Procedure: CVE-2018-2583, Performance Schema: + CVE-2018-2590, Partition: CVE-2018-2591, Optimizer: CVE-2018-2600, + CVE-2018-2667, Security:Privileges: CVE-2018-2696, Replication: + CVE-2018-2647.</li> + <li>Vulnerability allows a low or high privileged attacker with network + access via multiple protocols to compromise MySQL Server with + unauthorized creation, deletion, modification or access to data/ + critical data. InnoDB: CVE-2018-2612, Performance Schema: + CVE-2018-2645, Replication: CVE-2018-2647, Partition: CVE-2018-2562. + </li> + </ul> + </blockquote> + </body> + </description> + <references> + <url>http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixMSQL</url>; + <url>https://mariadb.com/kb/en/library/mariadb-5559-release-notes/</url>; + <cvename>CVE-2018-2562</cvename> + <cvename>CVE-2018-2565</cvename> + <cvename>CVE-2018-2573</cvename> + <cvename>CVE-2018-2576</cvename> + <cvename>CVE-2018-2583</cvename> + <cvename>CVE-2018-2586</cvename> + <cvename>CVE-2018-2590</cvename> + <cvename>CVE-2018-2591</cvename> + <cvename>CVE-2018-2600</cvename> + <cvename>CVE-2018-2612</cvename> + <cvename>CVE-2018-2622</cvename> + <cvename>CVE-2018-2640</cvename> + <cvename>CVE-2018-2645</cvename> + <cvename>CVE-2018-2646</cvename> + <cvename>CVE-2018-2647</cvename> + <cvename>CVE-2018-2665</cvename> + <cvename>CVE-2018-2667</cvename> + <cvename>CVE-2018-2668</cvename> + <cvename>CVE-2018-2696</cvename> + <cvename>CVE-2018-2703</cvename> + </references> + <dates> + <discovery>2017-01-18</discovery> + <entry>2018-01-19</entry> + </dates> + </vuln> + <vuln vid="c04dc18f-fcde-11e7-bdf6-00e04c1ea73d"> <topic>wordpress -- multiple issues</topic> <affects> @@ -140350,5 +140457,3 @@ misc.c: </vuln> </vuxml><!-- EOF --> <!-- Note: Please add new entries to the beginning of this file. --> -<!-- ex: set ts=8 tw=80 sw=2: --> -<!-- vim: set softtabstop=2 noexpandtab: -->
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201801191244.w0JCiC37090722>