Date: Sat, 24 Jan 2026 11:05:26 +0000 From: Bernard Spil <brnrd@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 94470dd9158e - main - security/vuxml: Add MySQL vulnerabilities Message-ID: <6974a776.3940d.74d5b4b9@gitrepo.freebsd.org>
index | next in thread | raw e-mail
The branch main has been updated by brnrd: URL: https://cgit.FreeBSD.org/ports/commit/?id=94470dd9158ec3d8ba7e73cea2b6b024b914aa1c commit 94470dd9158ec3d8ba7e73cea2b6b024b914aa1c Author: Bernard Spil <brnrd@FreeBSD.org> AuthorDate: 2026-01-24 11:05:22 +0000 Commit: Bernard Spil <brnrd@FreeBSD.org> CommitDate: 2026-01-24 11:05:22 +0000 security/vuxml: Add MySQL vulnerabilities --- security/vuxml/vuln/2026.xml | 48 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 48 insertions(+) diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml index 9d9fed2df511..16dfa6f5c0ce 100644 --- a/security/vuxml/vuln/2026.xml +++ b/security/vuxml/vuln/2026.xml @@ -1,3 +1,51 @@ + <vuln vid="ab01cb11-f911-11f0-b194-8447094a420f"> + <topic>MySQL -- Multiple vulnerabilities</topic> + <affects> + <package> + <name>mysql80-server</name> + <range><lt>8.0.45</lt></range> + </package> + <package> + <name>mysql84-server</name> + <range><lt>8.4.8</lt></range> + </package> + <package> + <name>mysql91-server</name> + <range><lt>9.1.3</lt></range> + </package> + <package> + <name>mysql94-server</name> + <range><lt>9.4.3</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Oracle reports:</p> + <blockquote cite="https://www.oracle.com/security-alerts/cpujan2026.html#AppendixMSQL">; + <p>Oracle reports multiple vulnerabilities in its MySQL server products.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2026-21949</cvename> + <cvename>CVE-2026-21950</cvename> + <cvename>CVE-2026-21968</cvename> + <cvename>CVE-2026-21929</cvename> + <cvename>CVE-2026-21936</cvename> + <cvename>CVE-2026-21937</cvename> + <cvename>CVE-2026-21941</cvename> + <cvename>CVE-2026-21948</cvename> + <cvename>CVE-2026-21952</cvename> + <cvename>CVE-2026-21964</cvename> + <cvename>CVE-2026-21965</cvename> + <url>https://www.oracle.com/security-alerts/cpujan2026.html#AppendixMSQL</url>; + </references> + <dates> + <discovery>2026-01-20</discovery> + <entry>2026-01-24</entry> + </dates> + </vuln> + <vuln vid="65439aa0-f77d-11f0-9821-b0416f0c4c67"> <topic>wheel -- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')</topic> <affects>home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6974a776.3940d.74d5b4b9>