Index: head/security/vuxml/vuln.xml =================================================================== --- head/security/vuxml/vuln.xml +++ head/security/vuxml/vuln.xml @@ -58,6 +58,94 @@ * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> + + MySQL -- multiple vulnerabilities + + + mariadb55-server + 5.5.49 + + + mariadb100-server + 10.0.25 + + + mariadb101-server + 10.1.12 + + + mysql55-server + 5.5.49 + + + mysql56-server + 5.6.30 + + + mysql57-server + 5.7.12 + + + percona55-server + 5.5.49 + + + percona-server + 5.6.30 + + + + +

Oracle reports reports:

+
+

Critical Patch Update contains 31 new security fixes for Oracle MySQL + 5.5.48, 5.6.29, 5.7.11 and earlier

+
+ +
+ + http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixMSQL + https://mariadb.com/kb/en/mariadb/mariadb-5549-release-notes/ + https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/ + https://mariadb.com/kb/en/mariadb/mariadb-10112-release-notes/ + CVE-2016-0705 + CVE-2016-0639 + CVE-2015-3194 + CVE-2016-0640 + CVE-2016-0641 + CVE-2016-3461 + CVE-2016-2047 + CVE-2016-0642 + CVE-2016-0643 + CVE-2016-0644 + CVE-2016-0646 + CVE-2016-0647 + CVE-2016-0648 + CVE-2016-0649 + CVE-2016-0650 + CVE-2016-0652 + CVE-2016-0653 + CVE-2016-0654 + CVE-2016-0655 + CVE-2016-0656 + CVE-2016-0657 + CVE-2016-0658 + CVE-2016-0651 + CVE-2016-0659 + CVE-2016-0661 + CVE-2016-0662 + CVE-2016-0663 + CVE-2016-0665 + CVE-2016-0666 + CVE-2016-0667 + CVE-2016-0668 + + + 2016-04-19 + 2016-04-30 + +
+ logstash -- password disclosure vulnerability