[Git][security-tracker-team/security-tracker][master] new mysql issues

Moritz Muehlenhoff (@jmm) jmm at debian.org
Sun Oct 22 21:22:27 BST 2023 


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3d005bc5 by Moritz Muehlenhoff at 2023-10-22T22:21:27+02:00
new mysql issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -52757,17 +52757,17 @@ CVE-2023-22117 (Vulnerability in the Oracle FLEXCUBE Universal Banking product o
 CVE-2023-22116
 	RESERVED
 CVE-2023-22115 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 8.0.34-1
 CVE-2023-22114 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2023-22113 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 8.0.34-1
 CVE-2023-22112 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2023-22111 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 8.0.34-1
 CVE-2023-22110 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 8.0.34-1
 CVE-2023-22109 (Vulnerability in the Oracle Business Intelligence Enterprise Edition p ...)
 	NOT-FOR-US: Oracle
 CVE-2023-22108 (Vulnerability in the Oracle WebLogic Server product of Oracle Fusion M ...)
@@ -52779,9 +52779,9 @@ CVE-2023-22106 (Vulnerability in the Oracle Enterprise Command Center Framework
 CVE-2023-22105 (Vulnerability in the BI Publisher product of Oracle Analytics (compone ...)
 	NOT-FOR-US: Oracle
 CVE-2023-22104 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 8.0.33-1
 CVE-2023-22103 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2023-22102 (Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)
 	TODO: check
 CVE-2023-22101 (Vulnerability in the Oracle WebLogic Server product of Oracle Fusion M ...)
@@ -52793,17 +52793,17 @@ CVE-2023-22099 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virt
 CVE-2023-22098 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
 	- virtualbox 7.0.12-dfsg-1
 CVE-2023-22097 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2023-22096 (Vulnerability in the Java VM component of Oracle Database Server.  Sup ...)
 	NOT-FOR-US: Oracle
 CVE-2023-22095 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <not-affected> (Only affects 8.1)
 CVE-2023-22094 (Vulnerability in the MySQL Installer product of Oracle MySQL (componen ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2023-22093 (Vulnerability in the Oracle iRecruitment product of Oracle E-Business  ...)
 	NOT-FOR-US: Oracle
 CVE-2023-22092 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2023-22091 (Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE  ...)
 	- openjdk-17 17.0.9+9-1
 CVE-2023-22090 (Vulnerability in the PeopleSoft Enterprise CC Common Application Objec ...)
@@ -52819,7 +52819,7 @@ CVE-2023-22086 (Vulnerability in the Oracle WebLogic Server product of Oracle Fu
 CVE-2023-22085 (Vulnerability in the Hospitality OPERA 5 Property Services product of  ...)
 	NOT-FOR-US: Oracle
 CVE-2023-22084 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2023-22083 (Vulnerability in the Oracle Enterprise Session Border Controller produ ...)
 	NOT-FOR-US: Oracle
 CVE-2023-22082 (Vulnerability in the Oracle Business Intelligence Enterprise Edition p ...)
@@ -52832,9 +52832,9 @@ CVE-2023-22081 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK prod
 CVE-2023-22080 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
 	NOT-FOR-US: Oracle
 CVE-2023-22079 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2023-22078 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2023-22077 (Vulnerability in the Oracle Database Recovery Manager component of Ora ...)
 	NOT-FOR-US: Oracle
 CVE-2023-22076 (Vulnerability in the Oracle Applications Framework product of Oracle E ...)
@@ -52850,20 +52850,20 @@ CVE-2023-22072 (Vulnerability in the Oracle WebLogic Server product of Oracle Fu
 CVE-2023-22071 (Vulnerability in the PL/SQL component of Oracle Database Server.  Supp ...)
 	NOT-FOR-US: Oracle
 CVE-2023-22070 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2023-22069 (Vulnerability in the Oracle WebLogic Server product of Oracle Fusion M ...)
 	NOT-FOR-US: Oracle
 CVE-2023-22068 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2023-22067 (Vulnerability in Oracle Java SE (component: CORBA).  Supported version ...)
 	- openjdk-11 11.0.21+9-1
 	- openjdk-8 8u392-ga-1
 CVE-2023-22066 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2023-22065 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 8.0.34-1
 CVE-2023-22064 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2023-22063
 	RESERVED
 CVE-2023-22062 (Vulnerability in the Oracle Hyperion Financial Reporting product of Or ...)
@@ -52873,7 +52873,7 @@ CVE-2023-22061 (Vulnerability in the Oracle Business Intelligence Enterprise Edi
 CVE-2023-22060 (Vulnerability in the Oracle Hyperion Workspace product of Oracle Hyper ...)
 	NOT-FOR-US: Oracle
 CVE-2023-22059 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2023-22058 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-8.0 8.0.34-1 (bug #1041819)
 CVE-2023-22057 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
@@ -52939,7 +52939,7 @@ CVE-2023-22034 (Vulnerability in the Unified Audit component of Oracle Database
 CVE-2023-22033 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-8.0 8.0.34-1 (bug #1041819)
 CVE-2023-22032 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 <unfixed>
 CVE-2023-22031 (Vulnerability in the Oracle WebLogic Server product of Oracle Fusion M ...)
 	NOT-FOR-US: Oracle
 CVE-2023-22030
@@ -52947,11 +52947,11 @@ CVE-2023-22030
 CVE-2023-22029 (Vulnerability in the Oracle Commerce Guided Search product of Oracle C ...)
 	NOT-FOR-US: Oracle
 CVE-2023-22028 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 8.0.32-1
 CVE-2023-22027 (Vulnerability in the Oracle Business Intelligence Enterprise Edition p ...)
 	NOT-FOR-US: Oracle
 CVE-2023-22026 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 8.0.32-1
 CVE-2023-22025 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition ...)
 	- openjdk-17 17.0.9+9-1
 	- openjdk-21 21.0.1+12-1
@@ -52974,7 +52974,7 @@ CVE-2023-22017 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virt
 CVE-2023-22016 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
 	- virtualbox 7.0.10-dfsg-1
 CVE-2023-22015 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	TODO: check
+	- mysql-8.0 8.0.32-1
 CVE-2023-22014 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
 	NOT-FOR-US: Oracle
 CVE-2023-22013 (Vulnerability in the Oracle Business Intelligence Enterprise Edition p ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d005bc5f1480fd6d0f431058525d146cf2235d5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d005bc5f1480fd6d0f431058525d146cf2235d5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231022/d05f4481/attachment.htm>

More information about the debian-security-tracker-commits mailing list