git: 4cb4054476b2 - main - security/vuxml: Document Jenkins Security Advisory 2022-02-09
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 10 Feb 2022 16:00:46 UTC
The branch main has been updated by lwhsu:
URL: https://cgit.FreeBSD.org/ports/commit/?id=4cb4054476b28b5fd320a315f299e6a1645e99f3
commit 4cb4054476b28b5fd320a315f299e6a1645e99f3
Author: Li-Wen Hsu <lwhsu@FreeBSD.org>
AuthorDate: 2022-02-10 16:00:36 +0000
Commit: Li-Wen Hsu <lwhsu@FreeBSD.org>
CommitDate: 2022-02-10 16:00:36 +0000
security/vuxml: Document Jenkins Security Advisory 2022-02-09
Sponsored by: The FreeBSD Foundation
---
security/vuxml/vuln-2022.xml | 33 +++++++++++++++++++++++++++++++++
1 file changed, 33 insertions(+)
diff --git a/security/vuxml/vuln-2022.xml b/security/vuxml/vuln-2022.xml
index b820879240b6..279497a8eafc 100644
--- a/security/vuxml/vuln-2022.xml
+++ b/security/vuxml/vuln-2022.xml
@@ -1,3 +1,36 @@
+ <vuln vid="0b0ad196-1ee8-4a98-89b1-4d5d82af49a9">
+ <topic>jenkins -- DoS vulnerability in bundled XStream library</topic>
+ <affects>
+ <package>
+ <name>jenkins</name>
+ <range><lt>2.334</lt></range>
+ </package>
+ <package>
+ <name>jenkins-lts</name>
+ <range><lt>2.319.3</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Jenkins Security Advisory:</p>
+ <blockquote cite="https://www.jenkins.io/security/advisory/2022-02-09/">
+ <h1>Description</h1>
+ <h5>(Medium) SECURITY-2602 / CVE-2021-43859 (upstream issue), CVE-2022-0538 (Jenkins-specific converters)</h5>
+ <p>DoS vulnerability in bundled XStream library</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2021-43859</cvename>
+ <cvename>CVE-2022-0538</cvename>
+ <url>https://www.jenkins.io/security/advisory/2022-02-09/</url>
+ </references>
+ <dates>
+ <discovery>2022-02-09</discovery>
+ <entry>2022-02-10</entry>
+ </dates>
+ </vuln>
+
<vuln vid="ff5606f7-8a45-11ec-8be6-d4c9ef517024">
<topic>MariaDB -- Multiple vulnerabilities</topic>
<affects>