dev-db

Security Bug Reports

• dev-db/{mariadb,mysql,percona-server,mysql-connector-c}: ENABLED_LOCAL_INFILE in the client is exploitable by the server

  675904 - Assigned to Gentoo Security
• <dev-db/percona-server-8.0.18.9: multiple vulnerabilities (CVE-2019-{2938,2974})

  699880 - Assigned to Gentoo Security
• <dev-db/sqlcipher-4.5.1: use after free leading to DoS (CVE-2020-27207)

  760690 - Assigned to Gentoo Security
• <dev-db/mongodb-{4.0.20,4.2.10}: multiple vulnerabilities (CVE-2019-2392, CVE-2020-{7925,7928})

  760827 - Assigned to Gentoo Security
• <dev-db/mongodb-{4.2.15,4.4.4}: DoS via crafted find query (CVE-2021-20326)

  798132 - Assigned to Gentoo Security
• dev-db/percona-server: multiple vulnerabilities

  803635 - Assigned to Gentoo Security
• <dev-db/mysql-{5.7.36,8,0,27}: multiple vulnerabilities (Oracle CPU Oct 2021)

  819891 - Assigned to Gentoo Security
• dev-db/redis: integer overflow via bundled hiredis

  821346 - Assigned to Gentoo Security
• <dev-db/pgbouncer-1.16.1: arbitrary query injection via MITM (CVE-2021-3935)

  826614 - Assigned to Gentoo Security
• <dev-db/mysql-{5.7.40,8.0.31}: multiple vulnerabilities (Oracle CPU Jan 2022)

  831442 - Assigned to Gentoo Security
• dev-db/sqlite: record leakage

  833451 - Assigned to Gentoo Security
• <dev-db/mysql-{5.7.36,8.0.31}: multiple vulnerabilities (Oracle CPU Apr 2022)

  839987 - Assigned to Gentoo Security
• <dev-db/mysql-{5.7.40, 8.0.31}: multiple vulnerabilities (Oracle CPU July 2022)

  859388 - Assigned to Gentoo Security
• <dev-db/mysql-{5.7.40, 8.0.31}: multiple vulnerabilities (Oracle CPU Oct 2022)

  877593 - Assigned to Gentoo Security
• dev-db/percona-xtrabackup{-bin,}: directory traversal (or memory corruption?)

  882783 - Assigned to Gentoo Security
• <dev-db/mysql-{5.7.41, 8.0.32}: multiple vulnerabilities (Oracle CPU January 2023)

  891319 - Assigned to Gentoo Security
• <dev-db/etcd-3.4.26: key name disclosure

  906656 - Assigned to Gentoo Security
• dev-db/mysql: multiple vulnerabilities (Oracle CPU July 2023)

  910578 - Assigned to Gentoo Security
• <dev-db/mariadb-{10.6.16,10.11.6}: denial of service

  917515 - Assigned to Gentoo Security
• <dev-db/etcd-3.4.28: http/2 rapid reset vulnerability

  918419 - Assigned to Gentoo Security
• dev-db/mysql: multiple vulnerabilities (Oracle CPU Oct 2023)

  918698 - Assigned to Gentoo Security
• <dev-db/mysql-8.0.36: multiple vulnerabilities (Oracle CPU Jan 2024)

  925125 - Assigned to Gentoo Security
• <dev-db/redict-7.3.1 <dev-db/redis-{6.2.16,7.2.6,7.4.1}: multiple vulnerabilities

  940609 - Assigned to Gentoo Security
• <dev-db/mongodb-5.0.30: Improper neutralization of null bytes may lead to buffer over-reads

  944308 - Assigned to Gentoo Security