Re: git: a69bda1109a0 - main - security/vuxml: Amend entry for Mongodb

Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: Ronald Klop <ronald-lists_at_klop.ws>
Date: Thu, 25 Dec 2025 04:55:32 UTC

Sorry for the misunderstanding. As mongo 8.0 is vulnerable.It should have been <lt>8.0.17</lt>. 

They have a bit unusual versioning scheme for the open source licensed code.
Regards,Ronald. 

Van: Fernando Apeste=?utf-8?Q?gu=C3=ADa?= <fernape@FreeBSD.org>
Datum: 24 december 2025 19:25
Aan: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org
Onderwerp: git: a69bda1109a0 - main - security/vuxml: Amend entry for Mongodb

> 
> 
> The branch main has been updated by fernape:
> 
> URL: https://cgit.FreeBSD.org/ports/commit/?id=a69bda1109a00d263558a57c76a55c4611f43ba8
> 
> commit a69bda1109a00d263558a57c76a55c4611f43ba8
> Author:     Fernando Apesteguía 
> AuthorDate: 2025-12-24 18:23:18 +0000
> Commit:     Fernando Apesteguía 
> CommitDate: 2025-12-24 18:23:18 +0000
> 
>     security/vuxml: Amend entry for Mongodb
>     
>     The port is for mongodb 8.0 and not 8.2
>     
>     Reported by:    ronald-lists@klop.ws
> ---
>  security/vuxml/vuln/2025.xml | 5 +----
>  1 file changed, 1 insertion(+), 4 deletions(-)
> 
> diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
> index ed5ff59c6426..9332eb40889d 100644
> --- a/security/vuxml/vuln/2025.xml
> +++ b/security/vuxml/vuln/2025.xml
> @@ -1,10 +1,6 @@
>    
>      MongoDB -- Improper Handling of Length Parameter Inconsistency
>      
> -    
> -   mongodb80
> -   8.2.3
> -    
>      
>     mongodb70
>     7.0.28
> @@ -27,6 +23,7 @@
>      
>        2025-12-19
>        2025-12-22
> +      2025-12-24
>      
>    
>  
> 
> 
> 
> 
>