CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

databases/db55.3.28_10

Oracle Berkeley DB, revision 5.3

Maintainer
ports@FreeBSD.org
Packages
db5 5.3.28_10
Upstream
up to date
CPE
oracle:berkeley_db from the port
WWW
https://www.oracle.com/database/berkeley-db/db.html
Links
cgit · VuXML

Unaddressed (16) · The CVE record lists this version as affected, no VuXML entry names the CVE

Updating to 18.1.40 would fix 16 of 16 unaddressed CVEs, according to the CVE records.
Fixed up to each version, cumulative: 6.2.32 14 · 6.138 15 · 18.1.40 16
CVE-2020-29817.02020-07-15Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1.40. Difficult to exploit vulnerability allows un…
CVE-2017-36047.02017-04-24Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows una…
CVE-2017-36057.02017-04-24Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows una…
CVE-2017-36067.02017-04-24Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows una…
CVE-2017-36077.02017-04-24Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows una…
CVE-2017-36087.02017-04-24Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows una…
CVE-2017-36097.02017-04-24Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows una…
CVE-2017-36107.02017-04-24Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows una…
CVE-2017-36117.02017-04-24Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows una…
CVE-2017-36127.02017-04-24Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows una…
CVE-2017-36137.02017-04-24Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows una…
CVE-2017-36147.02017-04-24Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows una…
CVE-2017-36157.02017-04-24Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows una…
CVE-2017-36167.02017-04-24Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows una…
CVE-2017-36177.02017-04-24Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows una…
CVE-2019-27083.32019-04-23Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily ex…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (62)

Matthias Andree (mandree) · 5.2.36.0_1
Fix broken symbolic links in libdb*-5.so.0 files.

Reported and patch
Submitted by: Herbert J. Skuhra
aa76438d42
Beat Gaetzi (beat) · 5.2.36.0
- Remove manual fix for FreeBSD 10.x as the FreeBSD 10.x workaround in   bsd.port.mk also handles configure script outside of WRKSRC.

Exp-runs by:	miwi
ce5e2fc7df
Beat Gaetzi (beat) · 5.2.36.0
- Fix build on FreeBSD 10. Apply manual fix as the configure script is   outside of WRKSRC and the WITH_FBSD10_FIX knob doesn't work in this   case.

Approved by:	portmgr (miwi)
e8404fa6f4
Matthias Andree (mandree) · 5.2.36.0
Update to new upstream bugfix release. ChangeLog: http://download.oracle.com/otndocs/products/berkeleydb/html/changelog_5_2.html
090ddb49f5
Matthias Andree (mandree) · 5.2.28.0
- Update databases/db5 to new upstream release 5.2.28.0. ChangeLog:   http://download.oracle.com/docs/cd/E17076_02/html/installation/changelog_5_2.html

- Remove databases/db51 (no hard dependencies), users having set db51
  manually for their ports need to set db5 and rebuild dependent ports.

- Add OPTIONS for localization (default off) and crypto (default on).

- Install libdb*-5.so symlinks into $PREFIX/lib

- If WITH_DEBUG is set, pass --enable-umrw to pacify valgrind, and
  --enable-debug.
57f5b06828
Matthias Andree (mandree) · 5.1.25.0_1
Move CPPFLAGS out of CONFIGURE_ENV. Fix up pkg-plist for WITH_JAVA and WITH_SQL builds. Remove trailing whitespace. Bump PORTREVISION.
07afda9df9
Matthias Andree (mandree) · 5.1.25.0
Update to new BDB 5.1.25 patch release.

ChangeLog: http://download.oracle.com/otndocs/products/berkeleydb/html/changelog_5_1.html
Feature safe: yes
b7d7cafdda
Matthias Andree (mandree) · 5.1.19.0
Update WWW: links for db* ports in pkg-descr.
a6f5f591fe
Matthias Andree (mandree) · 5.1.19.0
Update MASTER_SITES.

Submitted by: "Herbert J. Skuhra" <h.skuhra@gmail.com>
PR:           ports/152158
Approved by:  gslin@gslin.org (for db4[5-8]) (implicit, see Makefile)
4e8777dbb8
Matthias Andree (mandree) · 5.1.19.0
New version 5.1 of Oracle Berkeley DB 5.0, descended and repocopied from db50.
9078d26a63
Matthias Andree (mandree) · 5.0.26.0
Update to new upstream release 5.0.26.

Reported by: Kurt J. Lidl
0b562433c1
Matthias Andree (mandree) · 5.0.21.0
Add new port databases/db50, to package Oracle Berkeley DB 5.0.21.

Approved by:	garga (mentor)
2771c1d785