From nobody Sat Apr 22 12:20:38 2023 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Q3Vpv2W8tz46fcJ; Sat, 22 Apr 2023 12:20:39 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Q3Vpv0xmHz4N6H; Sat, 22 Apr 2023 12:20:39 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1682166039; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=chGq5vWwA9KLq1ZPjjV+hdgo41QJIgdp021sLcrTPm8=; b=geKqiSG7FoEANPtPwo6kOLCbHxthWWLBGQByIw7pLy9Tj6LNtGDEIkH/+AV1BNM5FdAr7v nWAIOndFSvar5EKOlBaWvFj1LCWwAwDJ20TNBF/9lQZ7vZ0QxNdcWbs8LFO6e5O5b5Ovdo d3tE/ZGG9/qv5zjFSgCBE9YQZbeFkQfqomdV3mJ4lKA8ioWkNUEbkNbYwnqmx53gxwtzRJ RSmJflxyFOCJVcLDiUqJKyBmroSJGK7Ty/feB1k4egzYk7j3im+ZhB5PHpL/NBVDNqP1Hb 8hhtskjXbgddjpSEsoD0H2sfO+Kkjm7WkaB0Ahu+2bI9mb5iBe8P169GkRmmrg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1682166039; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=chGq5vWwA9KLq1ZPjjV+hdgo41QJIgdp021sLcrTPm8=; b=MXSk1909+OwojvTQkL6qIyAymeDo8tvO2l6DV5R4dbhHS9lWp1X6NCxU41KXmv7XlkPqrH drq5ySR8lA4hw8vJTwvR6pOOYXRi3JcQLhZljm1ToS+SiLQhk1nOMWmlWOMJ2BKFJybM4i 9sRSYcvYJ0fpdJ3sGkOMgerqC5BCl3AGRycIDhIYA6NL0bXkoviDL84jvN4PV4TKeHzd5B XtDQgWfGymrFKPzvh+GN6btueBpEtuH7Z32DqZMZj5FDo0bn6lSXEaBIZzYnLRGpZZ6D4K 9fNJbqmEkQXqn5C7oS3L0lRRctbXjPzR7gOQbwFxP2/qxiV64MhXmSPDCb5wow== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1682166039; a=rsa-sha256; cv=none; b=Mi74Mu7DkNFM8ihORqgpm6uwYVAn62J8++7u0pacTLoBLQK4EPAv5pWewcgxhyf+9pTy0a 9hoR5THISp4KmTvQS+QJpMV+D4FKh+bi3YyjReO77Q2KCCDEnHU/9/ozYtVcmvpQTKviy2 PJ8Mp5hsiw8IWXrh7POOc2I4sXgWJSkdUytwt2IQtsaoUd61DGPfA3uvA8MBVN0gc3p+Zu 2WT5D6NoVuGv+a2HTtquc3FVjMDkKiWNUT9JhdiiZntakR+KykXlUbNT4M0y+RE0UZAuck qKEPnMT4pu7j4mi22l86mjUvqAdHyByTscBdc9UxFNighvXoU8fmgpk2OcGVgQ== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Q3Vpt6rxGz11rl; Sat, 22 Apr 2023 12:20:38 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 33MCKcAS002802; Sat, 22 Apr 2023 12:20:38 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 33MCKcvE002801; Sat, 22 Apr 2023 12:20:38 GMT (envelope-from git) Date: Sat, 22 Apr 2023 12:20:38 GMT Message-Id: <202304221220.33MCKcvE002801@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Bernard Spil Subject: git: 6c23313ac492 - main - security/vuxml: Document MySQL 2023Q2 vulnerabilities List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-main@freebsd.org X-BeenThere: dev-commits-ports-main@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: brnrd X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 6c23313ac492689a40ac3b26f8fae7571f447226 Auto-Submitted: auto-generated X-ThisMailContainsUnwantedMimeParts: N The branch main has been updated by brnrd: URL: https://cgit.FreeBSD.org/ports/commit/?id=6c23313ac492689a40ac3b26f8fae7571f447226 commit 6c23313ac492689a40ac3b26f8fae7571f447226 Author: Bernard Spil AuthorDate: 2023-04-22 12:20:32 +0000 Commit: Bernard Spil CommitDate: 2023-04-22 12:20:32 +0000 security/vuxml: Document MySQL 2023Q2 vulnerabilities --- security/vuxml/vuln/2023.xml | 71 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 71 insertions(+) diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml index 1fe272ebc8d4..a4ab8d31fc74 100644 --- a/security/vuxml/vuln/2023.xml +++ b/security/vuxml/vuln/2023.xml @@ -1,3 +1,74 @@ + + MySQL -- Multiple vulnerabilities + + + mysql-connector-java + 8.0.33 + + + mysql-client57 + 5.7.42 + + + mysql-server57 + 5.7.42 + + + mysql-client80 + 8.0.33 + + + mysql-server80 + 8.0.33 + + + + +

Oracle reports:

+
+

This Critical Patch Update contains 34 new security patches, plus + additional third party patches noted below, for Oracle MySQL. 11 of + these vulnerabilities may be remotely exploitable without + authentication, i.e., may be exploited over a network without + requiring user credentials. +

+
+ + + + CVE-2022-37434 + CVE-2023-21912 + CVE-2023-21980 + CVE-2023-21946 + CVE-2023-21929 + CVE-2023-21971 + CVE-2023-21911 + CVE-2023-21962 + CVE-2023-21919 + CVE-2023-21933 + CVE-2023-21972 + CVE-2023-21966 + CVE-2023-21913 + CVE-2023-21917 + CVE-2023-21920 + CVE-2023-21935 + CVE-2023-21945 + CVE-2023-21976 + CVE-2023-21977 + CVE-2023-21982 + CVE-2023-21953 + CVE-2023-21955 + CVE-2023-21940 + CVE-2023-21947 + CVE-2023-21963 + https://www.oracle.com/security-alerts/cpujan2023.html#AppendixMSQL + + + 2023-04-19 + 2023-04-22 + + + chromium -- multiple vulnerabilities