Date: Thu, 10 Feb 2022 16:00:46 GMT From: Li-Wen Hsu <lwhsu@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 4cb4054476b2 - main - security/vuxml: Document Jenkins Security Advisory 2022-02-09 Message-ID: <202202101600.21AG0k9Q034971@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by lwhsu: URL: https://cgit.FreeBSD.org/ports/commit/?id=4cb4054476b28b5fd320a315f299e6a1645e99f3 commit 4cb4054476b28b5fd320a315f299e6a1645e99f3 Author: Li-Wen Hsu <lwhsu@FreeBSD.org> AuthorDate: 2022-02-10 16:00:36 +0000 Commit: Li-Wen Hsu <lwhsu@FreeBSD.org> CommitDate: 2022-02-10 16:00:36 +0000 security/vuxml: Document Jenkins Security Advisory 2022-02-09 Sponsored by: The FreeBSD Foundation --- security/vuxml/vuln-2022.xml | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) diff --git a/security/vuxml/vuln-2022.xml b/security/vuxml/vuln-2022.xml index b820879240b6..279497a8eafc 100644 --- a/security/vuxml/vuln-2022.xml +++ b/security/vuxml/vuln-2022.xml @@ -1,3 +1,36 @@ + <vuln vid="0b0ad196-1ee8-4a98-89b1-4d5d82af49a9"> + <topic>jenkins -- DoS vulnerability in bundled XStream library</topic> + <affects> + <package> + <name>jenkins</name> + <range><lt>2.334</lt></range> + </package> + <package> + <name>jenkins-lts</name> + <range><lt>2.319.3</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Jenkins Security Advisory:</p> + <blockquote cite="https://www.jenkins.io/security/advisory/2022-02-09/">; + <h1>Description</h1> + <h5>(Medium) SECURITY-2602 / CVE-2021-43859 (upstream issue), CVE-2022-0538 (Jenkins-specific converters)</h5> + <p>DoS vulnerability in bundled XStream library</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2021-43859</cvename> + <cvename>CVE-2022-0538</cvename> + <url>https://www.jenkins.io/security/advisory/2022-02-09/</url>; + </references> + <dates> + <discovery>2022-02-09</discovery> + <entry>2022-02-10</entry> + </dates> + </vuln> + <vuln vid="ff5606f7-8a45-11ec-8be6-d4c9ef517024"> <topic>MariaDB -- Multiple vulnerabilities</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202202101600.21AG0k9Q034971>