diff options
| author | Li-Wen Hsu <lwhsu@FreeBSD.org> | 2022-06-22 19:05:48 +0000 |
|---|---|---|
| committer | Li-Wen Hsu <lwhsu@FreeBSD.org> | 2022-06-22 19:11:40 +0000 |
| commit | 28676937f7e12203df395188b61af15f451fa006 (patch) | |
| tree | 04bc3c31f6eae05cd28a9052a8b7f884a6392de9 | |
| parent | 38926bff7090636ad65e83c110dda00c68f3af06 (diff) | |
| download | ports-28676937f7e12203df395188b61af15f451fa006.tar.gz ports-28676937f7e12203df395188b61af15f451fa006.zip | |
security/vuxml: Document Jenkins Security Advisory 2022-06-22
Sponsored by: The FreeBSD Foundation
| -rw-r--r-- | security/vuxml/vuln-2022.xml | 41 |
1 files changed, 41 insertions, 0 deletions
diff --git a/security/vuxml/vuln-2022.xml b/security/vuxml/vuln-2022.xml index eb6d8c7f454d..d6f194bed4da 100644 --- a/security/vuxml/vuln-2022.xml +++ b/security/vuxml/vuln-2022.xml @@ -1,3 +1,44 @@ + <vuln vid="25be46f0-f25d-11ec-b62a-00e081b7aa2d"> + <topic>jenkins -- multiple vulnerabilities</topic> + <affects> + <package> + <name>jenkins</name> + <range><lt>2.356</lt></range> + </package> + <package> + <name>jenkins-lts</name> + <range><lt>2.346.1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Jenkins Security Advisory:</p> + <blockquote cite="https://www.jenkins.io/security/advisory/2022-06-22/"> + <h1>Description</h1> + <h5>(High) SECURITY-2781 / CVE-2022-34170 (SECURITY-2779), CVE-2022-34171 (SECURITY-2761), CVE-2022-34172 (SECURITY-2776), CVE-2022-34173 (SECURITY-2780)</h5> + <p>Multiple XSS vulnerabilities</p> + <h5>(Medium) SECURITY-2566 / CVE-2022-34174</h5> + <p>Observable timing discrepancy allows determining username validity</p> + <h5>(Medium) Unauthorized view fragment access</h5> + <p>SECURITY-2777 / CVE-2022-34175</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2022-34170</cvename> + <cvename>CVE-2022-34171</cvename> + <cvename>CVE-2022-34172</cvename> + <cvename>CVE-2022-34173</cvename> + <cvename>CVE-2022-34174</cvename> + <cvename>CVE-2022-34175</cvename> + <url>https://www.jenkins.io/security/advisory/2022-06-22/</url> + </references> + <dates> + <discovery>2022-06-22</discovery> + <entry>2022-06-22</entry> + </dates> + </vuln> + <vuln vid="4eeb93bf-f204-11ec-8fbd-d4c9ef517024"> <topic>OpenSSL -- Command injection vulnerability</topic> <affects> |