Skip to content

Commit 2da5d13

Browse files
Advisory Database Sync
1 parent 2d10fa8 commit 2da5d13

File tree

59 files changed

+867
-57
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

59 files changed

+867
-57
lines changed

advisories/unreviewed/2024/03/GHSA-x66g-5578-7px9/GHSA-x66g-5578-7px9.json

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-x66g-5578-7px9",
4-
"modified": "2025-02-27T03:33:55Z",
4+
"modified": "2025-12-23T18:30:18Z",
55
"published": "2024-03-13T15:31:05Z",
66
"aliases": [
77
"CVE-2024-26629"
@@ -19,6 +19,10 @@
1919
"type": "ADVISORY",
2020
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26629"
2121
},
22+
{
23+
"type": "WEB",
24+
"url": "https://git.kernel.org/stable/c/10d75984495f7fe62152c3b0dbfa3f0a6b739c9b"
25+
},
2226
{
2327
"type": "WEB",
2428
"url": "https://git.kernel.org/stable/c/8f5b860de87039b007e84a28a5eefc888154e098"

advisories/unreviewed/2024/04/GHSA-2vp9-gjfg-fmgw/GHSA-2vp9-gjfg-fmgw.json

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-2vp9-gjfg-fmgw",
4-
"modified": "2025-03-17T18:31:38Z",
4+
"modified": "2025-12-23T18:30:17Z",
55
"published": "2024-04-03T15:30:43Z",
66
"aliases": [
77
"CVE-2024-26710"
@@ -34,6 +34,10 @@
3434
{
3535
"type": "WEB",
3636
"url": "https://git.kernel.org/stable/c/f1acb109505d983779bbb7e20a1ee6244d2b5736"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://git.kernel.org/stable/c/f9a4c401bf4c5af3437ad221c0a5880a518068d4"
3741
}
3842
],
3943
"database_specific": {

advisories/unreviewed/2024/05/GHSA-3r3f-7rrr-c2h9/GHSA-3r3f-7rrr-c2h9.json

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,9 @@
6565
}
6666
],
6767
"database_specific": {
68-
"cwe_ids": [],
68+
"cwe_ids": [
69+
"CWE-362"
70+
],
6971
"severity": "MODERATE",
7072
"github_reviewed": false,
7173
"github_reviewed_at": null,

advisories/unreviewed/2024/05/GHSA-f73j-5pgc-v7qj/GHSA-f73j-5pgc-v7qj.json

Lines changed: 11 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-f73j-5pgc-v7qj",
4-
"modified": "2024-06-26T00:31:42Z",
4+
"modified": "2025-12-23T18:30:18Z",
55
"published": "2024-05-17T15:31:09Z",
66
"aliases": [
77
"CVE-2024-35805"
88
],
99
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm snapshot: fix lockup in dm_exception_table_exit\n\nThere was reported lockup when we exit a snapshot with many exceptions.\nFix this by adding \"cond_resched\" to the loop that frees the exceptions.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -52,8 +57,10 @@
5257
}
5358
],
5459
"database_specific": {
55-
"cwe_ids": [],
56-
"severity": null,
60+
"cwe_ids": [
61+
"CWE-667"
62+
],
63+
"severity": "MODERATE",
5764
"github_reviewed": false,
5865
"github_reviewed_at": null,
5966
"nvd_published_at": "2024-05-17T14:15:13Z"

advisories/unreviewed/2024/05/GHSA-mr3m-f78x-6fhf/GHSA-mr3m-f78x-6fhf.json

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,9 @@
5353
}
5454
],
5555
"database_specific": {
56-
"cwe_ids": [],
56+
"cwe_ids": [
57+
"CWE-476"
58+
],
5759
"severity": "MODERATE",
5860
"github_reviewed": false,
5961
"github_reviewed_at": null,

advisories/unreviewed/2024/05/GHSA-p672-9qr7-4cmf/GHSA-p672-9qr7-4cmf.json

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-p672-9qr7-4cmf",
4-
"modified": "2024-11-05T18:31:58Z",
4+
"modified": "2025-12-23T18:30:18Z",
55
"published": "2024-05-01T06:31:43Z",
66
"aliases": [
77
"CVE-2024-27005"
@@ -19,6 +19,10 @@
1919
"type": "ADVISORY",
2020
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27005"
2121
},
22+
{
23+
"type": "WEB",
24+
"url": "https://git.kernel.org/stable/c/19ec82b3cad1abef2a929262b8c1528f4e0c192d"
25+
},
2226
{
2327
"type": "WEB",
2428
"url": "https://git.kernel.org/stable/c/4c65507121ea8e0b47fae6d2049c8688390d46b6"
@@ -31,6 +35,10 @@
3135
"type": "WEB",
3236
"url": "https://git.kernel.org/stable/c/de1bf25b6d771abdb52d43546cf57ad775fb68a1"
3337
},
38+
{
39+
"type": "WEB",
40+
"url": "https://git.kernel.org/stable/c/fe549d8e976300d0dd75bd904eb216bed8b145e0"
41+
},
3442
{
3543
"type": "WEB",
3644
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53"

advisories/unreviewed/2024/05/GHSA-vpr8-93r8-xj35/GHSA-vpr8-93r8-xj35.json

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-vpr8-93r8-xj35",
4-
"modified": "2025-09-24T18:30:22Z",
4+
"modified": "2025-12-23T18:30:18Z",
55
"published": "2024-05-20T12:30:28Z",
66
"aliases": [
77
"CVE-2024-35974"
@@ -19,6 +19,10 @@
1919
"type": "ADVISORY",
2020
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-35974"
2121
},
22+
{
23+
"type": "WEB",
24+
"url": "https://git.kernel.org/stable/c/083b58373463a6e5ee60ecb135269348f68ad7df"
25+
},
2226
{
2327
"type": "WEB",
2428
"url": "https://git.kernel.org/stable/c/740ffad95ca8033bd6e080ed337655b13b4d38ac"
@@ -30,6 +34,10 @@
3034
{
3135
"type": "WEB",
3236
"url": "https://git.kernel.org/stable/c/8b8ace080319a866f5dfe9da8e665ae51d971c54"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://git.kernel.org/stable/c/b5dae1cd0d8368b4338430ff93403df67f0b8bcc"
3341
}
3442
],
3543
"database_specific": {

advisories/unreviewed/2024/06/GHSA-rvcj-9xfm-m9hr/GHSA-rvcj-9xfm-m9hr.json

Lines changed: 12 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,22 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-rvcj-9xfm-m9hr",
4-
"modified": "2024-06-25T15:31:08Z",
4+
"modified": "2025-12-23T18:30:19Z",
55
"published": "2024-06-25T15:31:08Z",
66
"aliases": [
77
"CVE-2024-5261"
88
],
99
"details": "Improper Certificate Validation vulnerability in LibreOffice \"LibreOfficeKit\" mode disables TLS certification verification\n\nLibreOfficeKit can be used for accessing LibreOffice functionality \nthrough C/C++. Typically this is used by third party components to reuse\n LibreOffice as a library to convert, view or otherwise interact with \ndocuments.\n\nLibreOffice internally makes use of \"curl\" to fetch remote resources such as images hosted on webservers.\n\nIn\n affected versions of LibreOffice, when used in LibreOfficeKit mode \nonly, then curl's TLS certification verification was disabled \n(CURLOPT_SSL_VERIFYPEER of false)\n\nIn the fixed versions curl operates in LibreOfficeKit mode the same as in standard mode with CURLOPT_SSL_VERIFYPEER of true.\n\nThis issue affects LibreOffice before version 24.2.4.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
1120
"affected": [],
1221
"references": [
1322
{
@@ -23,7 +32,7 @@
2332
"cwe_ids": [
2433
"CWE-295"
2534
],
26-
"severity": null,
35+
"severity": "CRITICAL",
2736
"github_reviewed": false,
2837
"github_reviewed_at": null,
2938
"nvd_published_at": "2024-06-25T13:15:50Z"

advisories/unreviewed/2024/10/GHSA-c7x4-5776-rm5h/GHSA-c7x4-5776-rm5h.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-c7x4-5776-rm5h",
4-
"modified": "2024-10-16T09:30:30Z",
4+
"modified": "2025-12-23T18:30:19Z",
55
"published": "2024-10-16T09:30:30Z",
66
"aliases": [
77
"CVE-2016-15041"

advisories/unreviewed/2024/11/GHSA-263m-wcmp-r5j6/GHSA-263m-wcmp-r5j6.json

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-263m-wcmp-r5j6",
4-
"modified": "2025-11-03T21:31:36Z",
4+
"modified": "2025-12-23T18:30:19Z",
55
"published": "2024-11-14T21:32:03Z",
66
"aliases": [
77
"CVE-2024-10394"
@@ -30,11 +30,20 @@
3030
{
3131
"type": "WEB",
3232
"url": "https://openafs.org/pages/security/OPENAFS-SA-2024-001.txt"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://www.openafs.org/pages/security/OPENAFS-SA-2024-001.txt"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://www.openafs.org/security"
3341
}
3442
],
3543
"database_specific": {
3644
"cwe_ids": [
37-
"CWE-190"
45+
"CWE-190",
46+
"CWE-305"
3847
],
3948
"severity": "HIGH",
4049
"github_reviewed": false,

0 commit comments

Comments
 (0)