Publish Advisories

GHSA-3x8x-qmm7-6f56 GHSA-46xg-2692-fh7x GHSA-q34q-mrch-vm2x GHSA-hx2r-xg86-xj35 GHSA-46q5-wp2g-gv63 GHSA-9fpr-g62f-647w GHSA-hxr9-q428-7jhg GHSA-28pg-93m7-9jmx GHSA-3cmg-5p27-qj6j GHSA-5v92-qmvx-fgv4 GHSA-gj49-2hq5-g5h7 GHSA-pm28-gfv5-pj4g GHSA-qjwp-794r-6x7v GHSA-xrhf-cccw-cpm8 GHSA-8jrf-4f89-74jx GHSA-rrv9-xfv2-43m6
github · Nov 17, 2024 · a118cd5 · a118cd5
1 parent a8356cf
commit a118cd5
Show file tree

Hide file tree

Showing 16 changed files with 149 additions and 15 deletions.
diff --git a/advisories/unreviewed/2024/04/GHSA-3x8x-qmm7-6f56/GHSA-3x8x-qmm7-6f56.json b/advisories/unreviewed/2024/04/GHSA-3x8x-qmm7-6f56/GHSA-3x8x-qmm7-6f56.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3x8x-qmm7-6f56",
-  "modified": "2024-10-31T18:31:16Z",
+  "modified": "2024-11-17T15:30:44Z",
   "published": "2024-04-17T12:32:05Z",
   "aliases": [
     "CVE-2024-26889"
@@ -29,6 +29,10 @@
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/2edce8e9a99dd5e4404259d52e754fdc97fb42c2"
     },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/4c69abb4d41ece30d9f4cfdf51cf3ee838f48723"
+    },
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/54a03e4ac1a41edf8a5087bd59f8241b0de96d3d"

diff --git a/advisories/unreviewed/2024/04/GHSA-46xg-2692-fh7x/GHSA-46xg-2692-fh7x.json b/advisories/unreviewed/2024/04/GHSA-46xg-2692-fh7x/GHSA-46xg-2692-fh7x.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-46xg-2692-fh7x",
-  "modified": "2024-04-17T12:32:05Z",
+  "modified": "2024-11-17T15:30:44Z",
   "published": "2024-04-17T12:32:05Z",
   "aliases": [
     "CVE-2024-26886"
@@ -18,6 +18,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26886"
     },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/0625d7c240b307b78640dcd823cb738cb900a8ba"
+    },
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/2c9e2df022ef8b9d7fac58a04a2ef4ed25288955"

diff --git a/advisories/unreviewed/2024/04/GHSA-q34q-mrch-vm2x/GHSA-q34q-mrch-vm2x.json b/advisories/unreviewed/2024/04/GHSA-q34q-mrch-vm2x/GHSA-q34q-mrch-vm2x.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-q34q-mrch-vm2x",
-  "modified": "2024-04-19T21:31:07Z",
+  "modified": "2024-11-17T15:30:44Z",
   "published": "2024-04-10T21:30:31Z",
   "aliases": [
     "CVE-2021-47195"
@@ -21,10 +21,18 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-47195"
     },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/11eab327a2a8bd36c38afbff920ae1bd45588dd4"
+    },
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/37330f37f6666c7739a44b2b6b95b047ccdbed2d"
     },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/54c2c96eafcfd242e52e932ab54ace4784efe1dd"
+    },
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/6c53b45c71b4920b5e62f0ea8079a1da382b9434"

diff --git a/advisories/unreviewed/2024/05/GHSA-hx2r-xg86-xj35/GHSA-hx2r-xg86-xj35.json b/advisories/unreviewed/2024/05/GHSA-hx2r-xg86-xj35/GHSA-hx2r-xg86-xj35.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hx2r-xg86-xj35",
-  "modified": "2024-05-22T09:31:45Z",
+  "modified": "2024-11-17T15:30:44Z",
   "published": "2024-05-22T09:31:45Z",
   "aliases": [
     "CVE-2021-47469"
@@ -25,6 +25,14 @@
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/722ef19a161ce3fffb3d1b01ce2301c306639bdd"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/aa3f3d7bef59583f2d3234173105a27ff61ef8fe"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/c8dce228db6f81dbc897a018dfc5c418e917cf64"
     }
   ],
   "database_specific": {

diff --git a/advisories/unreviewed/2024/06/GHSA-46q5-wp2g-gv63/GHSA-46q5-wp2g-gv63.json b/advisories/unreviewed/2024/06/GHSA-46q5-wp2g-gv63/GHSA-46q5-wp2g-gv63.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-46q5-wp2g-gv63",
-  "modified": "2024-11-14T18:30:31Z",
+  "modified": "2024-11-17T15:30:44Z",
   "published": "2024-06-19T15:30:52Z",
   "aliases": [
     "CVE-2024-38538"
@@ -29,14 +29,26 @@
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/28126b83f86ab9cc7936029c2dff845d3dcedba2"
     },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/3e01fc3c66e65d9afe98f1489047a1b2dd8741ca"
+    },
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/5b5d669f569807c7ab07546e73c0741845a2547a"
     },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/82090f94c723dab724b1c32db406091d40448a17"
+    },
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/8bd67ebb50c0145fd2ca8681ab65eb7e8cde1afc"
     },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/b2b7c43cd32080221bb233741bd6011983fe7c11"
+    },
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/c964429ef53f42098a6545a5dabeb1441c1e821d"

diff --git a/advisories/unreviewed/2024/06/GHSA-9fpr-g62f-647w/GHSA-9fpr-g62f-647w.json b/advisories/unreviewed/2024/06/GHSA-9fpr-g62f-647w/GHSA-9fpr-g62f-647w.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9fpr-g62f-647w",
-  "modified": "2024-10-17T15:31:07Z",
+  "modified": "2024-11-17T15:30:44Z",
   "published": "2024-06-19T15:30:54Z",
   "aliases": [
     "CVE-2024-38588"
@@ -48,6 +48,10 @@
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/e60b613df8b6253def41215402f72986fee3fc8d"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/eea46baf145150910ba134f75a67106ba2222c1b"
     }
   ],
   "database_specific": {

diff --git a/advisories/unreviewed/2024/07/GHSA-hxr9-q428-7jhg/GHSA-hxr9-q428-7jhg.json b/advisories/unreviewed/2024/07/GHSA-hxr9-q428-7jhg/GHSA-hxr9-q428-7jhg.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hxr9-q428-7jhg",
-  "modified": "2024-08-22T15:31:18Z",
+  "modified": "2024-11-17T15:30:45Z",
   "published": "2024-07-29T15:30:47Z",
   "aliases": [
     "CVE-2024-41080"
@@ -25,9 +25,25 @@
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/73254a297c2dd094abec7c9efee32455ae875bdf"
     },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/950ac86cff338ab56e2eaf611f4936ee34893b63"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/97ed7ff58de66c544692b3c2b988f3f594348de0"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/b17397a0a5c56e111f61cb5b77d162664dc00de9"
+    },
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/b571a367502c7ef94c688ef9c7f7d69a2ce3bcca"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/fdacd09f2ddf7a00787291f08ee48c0421e5b709"
     }
   ],
   "database_specific": {

diff --git a/advisories/unreviewed/2024/10/GHSA-28pg-93m7-9jmx/GHSA-28pg-93m7-9jmx.json b/advisories/unreviewed/2024/10/GHSA-28pg-93m7-9jmx/GHSA-28pg-93m7-9jmx.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-28pg-93m7-9jmx",
-  "modified": "2024-11-04T12:32:55Z",
+  "modified": "2024-11-17T15:30:45Z",
   "published": "2024-10-28T03:30:39Z",
   "aliases": [
     "CVE-2024-50067"
@@ -21,6 +21,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50067"
     },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/0dc3ad9ad2188da7f090b3dbe4d2fcd9ae8ae64f"
+    },
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/373b9338c9722a368925d83bc622c596896b328e"

diff --git a/advisories/unreviewed/2024/10/GHSA-3cmg-5p27-qj6j/GHSA-3cmg-5p27-qj6j.json b/advisories/unreviewed/2024/10/GHSA-3cmg-5p27-qj6j/GHSA-3cmg-5p27-qj6j.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3cmg-5p27-qj6j",
-  "modified": "2024-10-25T21:31:26Z",
+  "modified": "2024-11-17T15:30:45Z",
   "published": "2024-10-21T18:30:59Z",
   "aliases": [
     "CVE-2024-49986"
@@ -33,6 +33,10 @@
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/aac871e493fc8809e60209d9899b1af07e9dbfc8"
     },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/ba0b09a2f327319e252d8f3032019b958c0a5cd9"
+    },
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/f08adc5177bd4343df09033f62ab562c09ba7f7d"

diff --git a/advisories/unreviewed/2024/10/GHSA-5v92-qmvx-fgv4/GHSA-5v92-qmvx-fgv4.json b/advisories/unreviewed/2024/10/GHSA-5v92-qmvx-fgv4/GHSA-5v92-qmvx-fgv4.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5v92-qmvx-fgv4",
-  "modified": "2024-11-14T18:30:32Z",
+  "modified": "2024-11-17T15:30:45Z",
   "published": "2024-10-21T21:30:53Z",
   "aliases": [
     "CVE-2024-50036"
@@ -25,6 +25,10 @@
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/3c7c918ec0aa3555372c5a57f18780b7a96c5cfc"
     },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/547087307bc19417b4f2bc85ba9664a3e8db5a6a"
+    },
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/a60db84f772fc3a906c6c4072f9207579c41166f"

diff --git a/advisories/unreviewed/2024/10/GHSA-gj49-2hq5-g5h7/GHSA-gj49-2hq5-g5h7.json b/advisories/unreviewed/2024/10/GHSA-gj49-2hq5-g5h7/GHSA-gj49-2hq5-g5h7.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gj49-2hq5-g5h7",
-  "modified": "2024-10-28T18:31:39Z",
+  "modified": "2024-11-17T15:30:45Z",
   "published": "2024-10-21T18:30:59Z",
   "aliases": [
     "CVE-2024-49991"
@@ -36,6 +36,10 @@
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/c86ad39140bbcb9dc75a10046c2221f657e8083b"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/e7831613cbbcd9058d3658fbcdc5d5884ceb2e0c"
     }
   ],
   "database_specific": {

diff --git a/advisories/unreviewed/2024/10/GHSA-pm28-gfv5-pj4g/GHSA-pm28-gfv5-pj4g.json b/advisories/unreviewed/2024/10/GHSA-pm28-gfv5-pj4g/GHSA-pm28-gfv5-pj4g.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-pm28-gfv5-pj4g",
-  "modified": "2024-11-01T15:31:46Z",
+  "modified": "2024-11-17T15:30:45Z",
   "published": "2024-10-21T18:30:58Z",
   "aliases": [
     "CVE-2024-49950"
@@ -33,6 +33,10 @@
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/a1c6174e23df10b8e5770e82d63bc6e2118a3dc7"
     },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/b22346eec479a30bfa4a02ad2c551b54809694d0"
+    },
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/b90907696c30172b809aa3dd2f0caffae761e4c6"

diff --git a/advisories/unreviewed/2024/10/GHSA-qjwp-794r-6x7v/GHSA-qjwp-794r-6x7v.json b/advisories/unreviewed/2024/10/GHSA-qjwp-794r-6x7v/GHSA-qjwp-794r-6x7v.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qjwp-794r-6x7v",
-  "modified": "2024-11-08T18:30:43Z",
+  "modified": "2024-11-17T15:30:45Z",
   "published": "2024-10-15T12:30:37Z",
   "aliases": [
     "CVE-2024-47674"
@@ -21,6 +21,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47674"
     },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/3213fdcab961026203dd587a4533600c70b3336b"
+    },
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/35770ca6180caa24a2b258c99a87bd437a1ee10f"

diff --git a/advisories/unreviewed/2024/10/GHSA-xrhf-cccw-cpm8/GHSA-xrhf-cccw-cpm8.json b/advisories/unreviewed/2024/10/GHSA-xrhf-cccw-cpm8/GHSA-xrhf-cccw-cpm8.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xrhf-cccw-cpm8",
-  "modified": "2024-10-28T18:31:39Z",
+  "modified": "2024-11-17T15:30:45Z",
   "published": "2024-10-21T18:30:58Z",
   "aliases": [
     "CVE-2024-49960"
@@ -33,6 +33,10 @@
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/b85569585d0154d4db1e4f9e3e6a4731d407feb0"
     },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/cf3196e5e2f36cd80dab91ffae402e13935724bc"
+    },
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/fa78fb51d396f4f2f80f8e96a3b1516f394258be"

diff --git a/advisories/unreviewed/2024/11/GHSA-8jrf-4f89-74jx/GHSA-8jrf-4f89-74jx.json b/advisories/unreviewed/2024/11/GHSA-8jrf-4f89-74jx/GHSA-8jrf-4f89-74jx.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8jrf-4f89-74jx",
+  "modified": "2024-11-17T15:30:45Z",
+  "published": "2024-11-17T15:30:45Z",
+  "aliases": [
+    "CVE-2023-43091"
+  ],
+  "details": "A flaw was found in GNOME Maps, which is vulnerable to a code injection attack via its service.json configuration file. If the configuration file is malicious, it may execute arbitrary code.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43091"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2239091"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitlab.gnome.org/GNOME/gnome-maps/-/commit/d26cd774d524404ef7784e6808f551de83de4bea"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitlab.gnome.org/GNOME/gnome-maps/-/issues/588"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-17T13:15:14Z"
+  }
+}
diff --git a/advisories/unreviewed/2024/11/GHSA-rrv9-xfv2-43m6/GHSA-rrv9-xfv2-43m6.json b/advisories/unreviewed/2024/11/GHSA-rrv9-xfv2-43m6/GHSA-rrv9-xfv2-43m6.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rrv9-xfv2-43m6",
-  "modified": "2024-11-13T18:31:54Z",
+  "modified": "2024-11-17T15:30:45Z",
   "published": "2024-11-09T12:30:49Z",
   "aliases": [
     "CVE-2024-50243"
@@ -21,6 +21,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50243"
     },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/509c1c6b499a4d9026b58c6e1c3a10ed8db1839f"
+    },
     {
       "type": "WEB",
       "url": "https://git.kernel.org/stable/c/68b39c0765de7c97b34889c1f5e81c2a223fdacc"