From nobody Sun Dec 17 10:29:48 2023 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4StK2h5mhdz54QVh; Sun, 17 Dec 2023 10:29:48 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4StK2h4vRBz4cP4; Sun, 17 Dec 2023 10:29:48 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1702808988; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=pYlhkIafCx2jjQtYqT6earHQ0M/r5Vu4daqAh7XNQDs=; b=YCu2YPRCDIQRfR1MYhtL9ZZQL4qh3TL+lwQanOHW8ytKdaXiOwXaJ7QvsUKdrrVotm2SA/ h1Ma828LX7JDKMwmedxcwBmrtrhlHJuFEzc8k66Ui1y3GUsOF1jQ6sDbvw9AJPvv48fC+R /bnBLpbaQtx1boa+bEH4hZc/5aJK30Ddqu3JWErKr1ar+gNIYaDx49SVnS0AD3IHpgRhjh ce/LdNSidTDNPbK1dBZ+qlMbuHEgwAy05rbkTNSROGZMpS5ujCT2oiim1nfsF7cROTY93O lhi7qC5+wCj/MksYLU/LizNjHLCervKAMb4qgF1LEpoQWEdN9HAWU8MNbnYv8A== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1702808988; a=rsa-sha256; cv=none; b=i/VexJ8xfSsLHMkbbqA+V39G+ddHFlKRq/h4hXWoioapcmPSC1SXDiiH5KB66yRdE3yfr7 qkvb2SODhhJJ+WxmmSwyPQD5dkOJmA0nKOEfr+u+bZTS3Lth3iNOCe4sZCxMqmPnSzDMaE g1Ccml7xzHsNXtGL2VskfeTvdvMtnnpPHDtYUKR8P61qASupwPB4BpCZlrSMG6BR6raKg9 esDNRwxMaxQGI/3EnmqDvv6UN4wlYh9yGLsA/qZQ6S0xL10ivJSV9G+d7JT+sM76k3RfwY YcOxRf7YK/X+z1ZZqogxD9zGLJ39iR3MIT9eYZay3SKW6vn+ZIG6CrCsYZc8ww== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1702808988; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=pYlhkIafCx2jjQtYqT6earHQ0M/r5Vu4daqAh7XNQDs=; b=OZAjEx192zdzosYMjbDm0n4+roFCKSV/fI7gcRkv5YlVL4bybNQXSeIbG7hLuw60c+F1mF CPfiO+2lgwOO199rrkPba3KehnlqDkcTa+suCPWt8jXBuaUkblL3ZXQ+EVn/HHbe4Q4Lsu YDsxTl988ttFhJo9cfvudIzJjK/Ew+KIKlT/sYxcxEZs6pE4SCzh0OQI3KS7S0ZpElpvOa rXQKPtgk/8jDTxMhMPSKVR58y1YMNMLlToPkQzy+YhW5Nklr2p0EP8+IFlCteWxsOfABMq N6Df6iw22dZqZfGI1xG5qkAbMfeOE0p++pT5oVpwKCMsYENaH/kzmF9ohaf9+Q== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4StK2h3vJ9zZJY; Sun, 17 Dec 2023 10:29:48 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.17.1/8.17.1) with ESMTP id 3BHATmES087872; Sun, 17 Dec 2023 10:29:48 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.17.1/8.17.1/Submit) id 3BHATmbN087869; Sun, 17 Dec 2023 10:29:48 GMT (envelope-from git) Date: Sun, 17 Dec 2023 10:29:48 GMT Message-Id: <202312171029.3BHATmbN087869@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Dave Cottlehuber Subject: git: 7d1842192d85 - main - security/vuxml: add CouchDB CVE details List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-all@freebsd.org X-BeenThere: dev-commits-ports-all@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: dch X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 7d1842192d85b9dbf7c318a3a264d347463505ce Auto-Submitted: auto-generated The branch main has been updated by dch: URL: https://cgit.FreeBSD.org/ports/commit/?id=7d1842192d85b9dbf7c318a3a264d347463505ce commit 7d1842192d85b9dbf7c318a3a264d347463505ce Author: Dave Cottlehuber AuthorDate: 2023-12-17 10:29:43 +0000 Commit: Dave Cottlehuber CommitDate: 2023-12-17 10:29:43 +0000 security/vuxml: add CouchDB CVE details Security: CVE-2023-26268 Sponsored by: SkunkWerks, GmbH --- security/vuxml/vuln/2023.xml | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml index 60addef9ef70..7f31033b2164 100644 --- a/security/vuxml/vuln/2023.xml +++ b/security/vuxml/vuln/2023.xml @@ -1,3 +1,31 @@ + + couchdb -- information sharing via couchjs processes + + + couchdb + 3.3.2,2 + + + + +

Nick Vatamane reports:

+
+

Design documents with matching document IDs, from databases on the + same cluster, may share a mutable Javascript environment when using + various design document functions.

+
+ + + + CVE-2023-26268 + https://docs.couchdb.org/en/stable/cve/2023-26268.html + + + 2023-05-02 + 2023-12-17 + + + Gitlab -- vulnerabilities