Merge pull request #316 from gthao313/advisories-20251111

Author: gthao313

advisories/4.5.0/BRSA-ayfi57tij8hr.toml

@@ -0,0 +1,16 @@
+[advisory]
+id = "BRSA-ayfi57tij8hr"
+title = "Bottlerocket Kernel 6.1 Updates"
+severity = "high"
+description = "Kernel version 6.1.158 is now available with important fixes. All users must upgrade. Advisory information for kernel is often published after new kernels become available. Bottlerocket recommends that you consume the latest kernel release for your LTS version."
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.158"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianhg"
+issue-date = 2025-11-11T21:19:43Z
+arches = ["aarch64", "x86_64"]
+version = "4.5.0"

advisories/4.5.0/BRSA-cxxragpofmpg.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-cxxragpofmpg"
+title = "kernel CVE-2025-40019"
+cve = "CVE-2025-40019"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.158"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianhg"
+issue-date = 2025-11-11T21:19:43Z
+arches = ["aarch64", "x86_64"]
+version = "4.5.0"

advisories/4.5.0/BRSA-k4mgk939p1lr.toml

@@ -0,0 +1,16 @@
+[advisory]
+id = "BRSA-k4mgk939p1lr"
+title = "Bottlerocket Kernel 6.12 Updates"
+severity = "high"
+description = "Kernel version 6.12.55 is now available with important fixes. All users must upgrade. Advisory information for kernel is often published after new kernels become available. Bottlerocket recommends that you consume the latest kernel release for your LTS version."
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.55"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianhg"
+issue-date = 2025-11-11T21:19:43Z
+arches = ["aarch64", "x86_64"]
+version = "4.5.0"