From 2a45cbfb739a4248cf343f60f678cca7c87d2381 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 6 Mar 2024 21:55:29 +0000 Subject: [PATCH] Publish GHSA-6f9g-cxwr-q5jr --- .../GHSA-6f9g-cxwr-q5jr.json | 26 ++++++++++++++----- 1 file changed, 20 insertions(+), 6 deletions(-) diff --git a/advisories/github-reviewed/2024/01/GHSA-6f9g-cxwr-q5jr/GHSA-6f9g-cxwr-q5jr.json b/advisories/github-reviewed/2024/01/GHSA-6f9g-cxwr-q5jr/GHSA-6f9g-cxwr-q5jr.json index 398e2f4ea12..6e73cc20512 100644 --- a/advisories/github-reviewed/2024/01/GHSA-6f9g-cxwr-q5jr/GHSA-6f9g-cxwr-q5jr.json +++ b/advisories/github-reviewed/2024/01/GHSA-6f9g-cxwr-q5jr/GHSA-6f9g-cxwr-q5jr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-6f9g-cxwr-q5jr", - "modified": "2024-01-31T20:20:22Z", + "modified": "2024-03-06T21:54:07Z", "published": "2024-01-24T18:31:02Z", "aliases": [ "CVE-2024-23897" @@ -50,20 +50,30 @@ "introduced": "2.427" }, { - "fixed": "2.442" + "fixed": "2.440.1" } ] } - ], - "database_specific": { - "last_known_affected_version_range": "<= 2.440" - } + ] }, { "package": { "ecosystem": "Maven", "name": "org.jenkins-ci.main:jenkins-core" }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.441" + }, + { + "fixed": "2.442" + } + ] + } + ], "versions": [ "2.441" ] @@ -74,6 +84,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23897" }, + { + "type": "WEB", + "url": "https://www.jenkins.io/changelog-stable/#v2.440.1" + }, { "type": "WEB", "url": "https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314"