Date: Fri, 03 Apr 2026 16:44:29 +0000
From: Fernando Apeste=?utf-8?Q?gu=C3=ADa?= <fernape@FreeBSD.org>
To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org
Subject: git: d7f642fc7863 - main - security/vuxml: Add mongodb{78}0 vulnerability
Message-ID: <69cfee6d.180af.3d4cfd75@gitrepo.freebsd.org>
index | next in thread | raw e-mail
The branch main has been updated by fernape: URL: https://cgit.FreeBSD.org/ports/commit/?id=d7f642fc7863fbd99027e6ff4a83f99d30dabba3 commit d7f642fc7863fbd99027e6ff4a83f99d30dabba3 Author: Fernando Apesteguía <fernape@FreeBSD.org> AuthorDate: 2026-04-03 16:42:46 +0000 Commit: Fernando Apesteguía <fernape@FreeBSD.org> CommitDate: 2026-04-03 16:42:46 +0000 security/vuxml: Add mongodb{78}0 vulnerability CVSS-B 6.0 MEDIUM Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N --- security/vuxml/vuln/2026.xml | 37 +++++++++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml index 26e199be0b1c..65c4cb793636 100644 --- a/security/vuxml/vuln/2026.xml +++ b/security/vuxml/vuln/2026.xml @@ -1,3 +1,40 @@ + <vuln vid="a117f43b-2f7b-11f1-89f4-b42e991fc52e"> + <topic>MongoDB Server -- CWE-617: Reachable Assertion</topic> + <affects> + <package> + <name>mongodb80</name> + <range><lt>8.0.18</lt></range> + </package> + <package> + <name>mongodb70</name> + <range><lt>7.0.31</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>https://jira.mongodb.org/browse/SERVER-101758 reports:</p> + <blockquote cite="https://jira.mongodb.org/browse/SERVER-101758">; + <p> + A user with access to the cluster with a limited set of + privilege actions can trigger a crash of amongod process + during the limited and unpredictable window when the + cluster is being promoted from a replica set to a sharded + cluster. This may cause a denial of service by taking + down the primary of the replica set. + </p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2026-5170</cvename> + <url>https://cveawg.mitre.org/api/cve/CVE-2026-5170</url>; + </references> + <dates> + <discovery>2026-03-30</discovery> + <entry>2026-04-03</entry> + </dates> + </vuln> + <vuln vid="adb096d4-2e72-11f1-acc1-339a1a6999b0"> <topic>openexr -- multiple vulnerabilities</topic> <affects>home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?69cfee6d.180af.3d4cfd75>