[Git][security-tracker-team/security-tracker][master] new mysql issues

Moritz Muehlenhoff (@jmm) jmm at debian.org
Wed Apr 20 17:58:16 BST 2022 


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
45dabe80 by Moritz Muehlenhoff at 2022-04-20T18:57:42+02:00
new mysql issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -30326,9 +30326,9 @@ CVE-2022-21481 (Vulnerability in the PeopleSoft Enterprise FIN Cash Management p
 CVE-2022-21480 (Vulnerability in the Oracle Transportation Management product of Oracl ...)
 	NOT-FOR-US: Oracle
 CVE-2022-21479 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21478 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21477 (Vulnerability in the Oracle Applications Framework product of Oracle E ...)
 	NOT-FOR-US: Oracle
 CVE-2022-21476 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
@@ -30362,29 +30362,32 @@ CVE-2022-21464 (Vulnerability in the JD Edwards EnterpriseOne Tools product of O
 CVE-2022-21463 (Vulnerability in the Oracle Solaris product of Oracle Systems (compone ...)
 	NOT-FOR-US: Oracle
 CVE-2022-21462 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21461 (Vulnerability in the Oracle Solaris product of Oracle Systems (compone ...)
 	NOT-FOR-US: Oracle
 CVE-2022-21460 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
+	- mysql-5.7 <removed>
 CVE-2022-21459 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21458 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
 	NOT-FOR-US: Oracle
 CVE-2022-21457 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21456 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
 	NOT-FOR-US: Oracle
 CVE-2022-21455
 	RESERVED
 CVE-2022-21454 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-5.7 <removed>
+	- mysql-8.0 <unfixed>
 CVE-2022-21453 (Vulnerability in the Oracle WebLogic Server product of Oracle Fusion M ...)
 	NOT-FOR-US: Oracle
 CVE-2022-21452 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21451 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
+	- mysql-5.7 <removed>
 CVE-2022-21450 (Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub produc ...)
 	NOT-FOR-US: Oracle
 CVE-2022-21449 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
@@ -30400,7 +30403,8 @@ CVE-2022-21446 (Vulnerability in the Oracle Solaris product of Oracle Systems (c
 CVE-2022-21445 (Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middle ...)
 	NOT-FOR-US: Oracle
 CVE-2022-21444 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
+	- mysql-5.7 <removed>
 CVE-2022-21443 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
 	- openjdk-8 <unfixed>
 	- openjdk-11 <unfixed>
@@ -30410,17 +30414,17 @@ CVE-2022-21442 (Vulnerability in Oracle GoldenGate (component: OGG Core Library)
 CVE-2022-21441 (Vulnerability in the Oracle WebLogic Server product of Oracle Fusion M ...)
 	NOT-FOR-US: Oracle
 CVE-2022-21440 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21439
 	RESERVED
 CVE-2022-21438 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21437 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21436 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21435 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21434 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
 	- openjdk-8 <unfixed>
 	- openjdk-11 <unfixed>
@@ -30438,17 +30442,18 @@ CVE-2022-21429
 CVE-2022-21428
 	RESERVED
 CVE-2022-21427 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
+	- mysql-5.7 <removed>
 CVE-2022-21426 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
 	- openjdk-8 <unfixed>
 	- openjdk-11 <unfixed>
 	- openjdk-17 <unfixed>
 CVE-2022-21425 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21424 (Vulnerability in the Oracle Communications Billing and Revenue Managem ...)
 	NOT-FOR-US: Oracle
 CVE-2022-21423 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21422 (Vulnerability in the Oracle Communications Billing and Revenue Managem ...)
 	NOT-FOR-US: Oracle
 CVE-2022-21421 (Vulnerability in the Oracle Business Intelligence Enterprise Edition p ...)
@@ -30458,19 +30463,20 @@ CVE-2022-21420 (Vulnerability in the Oracle Coherence product of Oracle Fusion M
 CVE-2022-21419 (Vulnerability in the Oracle Business Intelligence Enterprise Edition p ...)
 	NOT-FOR-US: Oracle
 CVE-2022-21418 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21417 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
+	- mysql-5.7 <removed>
 CVE-2022-21416 (Vulnerability in the Oracle Solaris product of Oracle Systems (compone ...)
 	NOT-FOR-US: Oracle
 CVE-2022-21415 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21414 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	TODO: check
 CVE-2022-21413 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21412 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2022-21411 (Vulnerability in the RDBMS Gateway / Generic ODBC Connectivity compone ...)
 	NOT-FOR-US: Oracle
 CVE-2022-21410 (Vulnerability in the Oracle Database - Enterprise Edition Sharding com ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/45dabe80aed374daf17c4da4404351767880d8a6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/45dabe80aed374daf17c4da4404351767880d8a6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220420/8783397d/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list