From 86a124c3d52383eebb5f070e29b90bcae332ca9e Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 24 Oct 2024 21:58:03 +0000 Subject: [PATCH] Publish Advisories GHSA-c2fx-8r76-gh36 GHSA-9vg3-cf92-h2h7 GHSA-5m69-3chg-6f8m GHSA-v57h-6hmh-g2p4 --- .../GHSA-c2fx-8r76-gh36.json | 27 ++++++++----- .../GHSA-9vg3-cf92-h2h7.json | 39 ++++++++----------- .../GHSA-5m69-3chg-6f8m.json | 14 ++++++- .../GHSA-v57h-6hmh-g2p4.json | 6 +-- 4 files changed, 50 insertions(+), 36 deletions(-) diff --git a/advisories/github-reviewed/2018/11/GHSA-c2fx-8r76-gh36/GHSA-c2fx-8r76-gh36.json b/advisories/github-reviewed/2018/11/GHSA-c2fx-8r76-gh36/GHSA-c2fx-8r76-gh36.json index 97b91742f8f..7adfba5ae89 100644 --- a/advisories/github-reviewed/2018/11/GHSA-c2fx-8r76-gh36/GHSA-c2fx-8r76-gh36.json +++ b/advisories/github-reviewed/2018/11/GHSA-c2fx-8r76-gh36/GHSA-c2fx-8r76-gh36.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-c2fx-8r76-gh36", - "modified": "2020-06-16T21:29:59Z", + "modified": "2024-10-24T21:56:33Z", "published": "2018-11-06T23:14:22Z", "aliases": [ "CVE-2013-7323" @@ -9,7 +9,14 @@ "summary": "High severity vulnerability that affects python-gnupg", "details": "python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" + } ], "affected": [ { @@ -48,6 +55,14 @@ "type": "ADVISORY", "url": "https://github.com/advisories/GHSA-c2fx-8r76-gh36" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/python-gnupg/PYSEC-2014-89.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/vsajip/python-gnupg" + }, { "type": "WEB", "url": "http://seclists.org/oss-sec/2014/q1/243" @@ -60,14 +75,6 @@ "type": "WEB", "url": "http://seclists.org/oss-sec/2014/q1/294" }, - { - "type": "WEB", - "url": "http://secunia.com/advisories/56616" - }, - { - "type": "WEB", - "url": "http://secunia.com/advisories/59031" - }, { "type": "WEB", "url": "http://www.debian.org/security/2014/dsa-2946" diff --git a/advisories/github-reviewed/2020/03/GHSA-9vg3-cf92-h2h7/GHSA-9vg3-cf92-h2h7.json b/advisories/github-reviewed/2020/03/GHSA-9vg3-cf92-h2h7/GHSA-9vg3-cf92-h2h7.json index 0b25584d44c..6ab3cbcc44b 100644 --- a/advisories/github-reviewed/2020/03/GHSA-9vg3-cf92-h2h7/GHSA-9vg3-cf92-h2h7.json +++ b/advisories/github-reviewed/2020/03/GHSA-9vg3-cf92-h2h7/GHSA-9vg3-cf92-h2h7.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9vg3-cf92-h2h7", - "modified": "2023-02-13T20:45:22Z", + "modified": "2024-10-24T21:57:33Z", "published": "2020-03-10T20:39:05Z", "aliases": [ "CVE-2013-2167" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -20,23 +24,6 @@ "ecosystem": "PyPI", "name": "python-keystoneclient" }, - "ecosystem_specific": { - "affected_functions": [ - "keystoneclient.middleware.auth_token.AuthProtocol._protect_cache_value", - "keystoneclient.middleware.auth_token.AuthProtocol._unprotect_cache_value", - "keystoneclient.middleware.auth_token.AuthProtocol._get_cache_key", - "keystoneclient.middleware.auth_token.AuthProtocol._cache_get", - "keystoneclient.middleware.auth_token.AuthProtocol._cache_store", - "keystoneclient.middleware.auth_token.AuthProtocol._cache_put", - "keystoneclient.middleware.memcache_crypt.generate_aes_key", - "keystoneclient.middleware.memcache_crypt.compute_mac", - "keystoneclient.middleware.memcache_crypt.hash_data", - "keystoneclient.middleware.memcache_crypt.sign_data", - "keystoneclient.middleware.memcache_crypt.verify_signed_data", - "keystoneclient.middleware.memcache_crypt.encrypt_data", - "keystoneclient.middleware.memcache_crypt.decrypt_data" - ] - }, "ranges": [ { "type": "ECOSYSTEM", @@ -80,10 +67,22 @@ "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85492" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-9vg3-cf92-h2h7" + }, + { + "type": "PACKAGE", + "url": "https://github.com/openstack/python-keystoneclient" + }, { "type": "WEB", "url": "https://github.com/openstack/python-keystoneclient/commits/0.3.0" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/python-keystoneclient/PYSEC-2019-161.yaml" + }, { "type": "WEB", "url": "https://security-tracker.debian.org/tracker/CVE-2013-2167" @@ -99,10 +98,6 @@ { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2013/06/19/5" - }, - { - "type": "WEB", - "url": "http://www.securityfocus.com/bid/60680" } ], "database_specific": { diff --git a/advisories/github-reviewed/2021/08/GHSA-5m69-3chg-6f8m/GHSA-5m69-3chg-6f8m.json b/advisories/github-reviewed/2021/08/GHSA-5m69-3chg-6f8m/GHSA-5m69-3chg-6f8m.json index 7bc4a9322d0..7d12e344207 100644 --- a/advisories/github-reviewed/2021/08/GHSA-5m69-3chg-6f8m/GHSA-5m69-3chg-6f8m.json +++ b/advisories/github-reviewed/2021/08/GHSA-5m69-3chg-6f8m/GHSA-5m69-3chg-6f8m.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-5m69-3chg-6f8m", - "modified": "2021-08-26T19:21:15Z", + "modified": "2024-10-24T21:55:10Z", "published": "2021-08-30T16:23:26Z", "aliases": [ "CVE-2020-18702" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" } ], "affected": [ @@ -44,6 +48,14 @@ "type": "WEB", "url": "https://github.com/rochacbruno/quokka/issues/675" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-5m69-3chg-6f8m" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/quokka/PYSEC-2021-143.yaml" + }, { "type": "PACKAGE", "url": "https://github.com/rochacbruno/quokka" diff --git a/advisories/github-reviewed/2022/09/GHSA-v57h-6hmh-g2p4/GHSA-v57h-6hmh-g2p4.json b/advisories/github-reviewed/2022/09/GHSA-v57h-6hmh-g2p4/GHSA-v57h-6hmh-g2p4.json index 183360db990..9abdcab8bc1 100644 --- a/advisories/github-reviewed/2022/09/GHSA-v57h-6hmh-g2p4/GHSA-v57h-6hmh-g2p4.json +++ b/advisories/github-reviewed/2022/09/GHSA-v57h-6hmh-g2p4/GHSA-v57h-6hmh-g2p4.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-v57h-6hmh-g2p4", - "modified": "2022-09-23T23:39:17Z", + "modified": "2024-10-24T21:55:59Z", "published": "2022-09-23T22:07:10Z", "aliases": [ "CVE-2022-39242" @@ -18,7 +18,7 @@ { "package": { "ecosystem": "crates.io", - "name": "frontier" + "name": "pallet-ethereum" }, "ranges": [ { @@ -28,7 +28,7 @@ "introduced": "0" }, { - "last_affected": "0.1.0" + "last_affected": "3.0.0" } ] }