regen for 1.3.1; add stub file for 1.3.2 since we have a list of those TBD items now

Signed-off-by: Nick Boldt <[email protected]>

Author: nickboldt

modules/release-notes/list-fixed-security-issues-in-product-1.3.1.txt

@@ -1,9 +1,6 @@
 # CVE number, affected package, fixed in version(s), JIRA
 
 # not yet fixed, built, or ready for release
-# CVE-2024-21534,jsonpath-plus,10.0.0,RHIDP-4440
-# CVE-2024-47762,@backstage/plugin-app-backend,0.3.75,RHIDP-4321
-# CVE-2024-45816,@backstage/plugin-techdocs-backend,1.10.13,RHIDP-4116
 # CVE-2024-37890,ws,8.17.1||7.5.10||6.2.3||5.2.4,RHIDP-2733
-# CVE-2024-46976,@backstage/plugin-techdocs-backend,1.10.13,RHIDP-4114
+# CVE-2024-21536,http-proxy-middleware,2.0.7||3.0.3,RHIDP-4612
 # CVE-2024-45590,body-parser,1.20.3,RHIDP-3917,mostly fixed but missed immobiliarelabs-backstage-plugin-gitlab-backend-dynamic

modules/release-notes/list-fixed-security-issues-in-product-1.3.2.txt

@@ -0,0 +1,8 @@
+# CVE number, affected package, fixed in version(s), JIRA
+
+# not yet fixed, built, or ready for release
+# CVE-2024-21534,jsonpath-plus,10.0.0,RHIDP-4440
+# CVE-2024-47762,@backstage/plugin-app-backend,0.3.75,RHIDP-4321
+# CVE-2024-45816,@backstage/plugin-techdocs-backend,1.10.13,RHIDP-4116
+# CVE-2024-46976,@backstage/plugin-techdocs-backend,1.10.13,RHIDP-4114
+# CVE-2024-45815,@backstage/plugin-catalog-backend,1.26.0,RHIDP-4118

modules/release-notes/list-fixed-security-issues-in-rpm-1.3.1.txt

@@ -13,3 +13,4 @@ CVE-2024-40959
 CVE-2024-42079 
 CVE-2024-42272
 CVE-2024-42284
+CVE-2024-9355

modules/release-notes/snip-fixed-security-issues-in-rpm-1.3.1.adoc

@@ -11,6 +11,9 @@ link:https://access.redhat.com/security/cve/CVE-2023-52658[CVE-2023-52658]::
 In the Linux kernel, the following vulnerability has been resolved:
 Revert "net/mlx5: Block entering switchdev mode with ns inconsistency"
 
+link:https://access.redhat.com/security/cve/CVE-2024-9355[CVE-2024-9355]::
+A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.  It is also possible to force a derived key to be all zeros instead of an unpredictable value.  This may have follow-on implications for the Go TLS stack.
+
 link:https://access.redhat.com/security/cve/CVE-2024-27403[CVE-2024-27403]::
 In the Linux kernel, the following vulnerability has been resolved:
 netfilter: nft_flow_offload: reset dst in route object after setting up flow