Publish Advisories

GHSA-4532-pmx7-9ww7
GHSA-45x7-px36-x8w8
GHSA-qj86-p74r-7wp5

advisories/github-reviewed/2023/11/GHSA-4532-pmx7-9ww7/GHSA-4532-pmx7-9ww7.json

@@ -1,8 +1,9 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4532-pmx7-9ww7",
-  "modified": "2023-12-07T22:40:42Z",
+  "modified": "2023-12-19T21:49:34Z",
   "published": "2023-11-14T18:30:27Z",
+  "withdrawn": "2023-12-19T21:49:34Z",
   "aliases": [
     "CVE-2023-48094"
   ],

advisories/github-reviewed/2023/12/GHSA-45x7-px36-x8w8/GHSA-45x7-px36-x8w8.json

@@ -90,6 +90,14 @@
       "type": "WEB",
       "url": "https://github.com/paramiko/paramiko/issues/2337"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/proftpd/proftpd/issues/456"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/NixOS/nixpkgs/pull/275249"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/libssh2/libssh2/pull/1291"
@@ -102,6 +110,10 @@
       "type": "WEB",
       "url": "https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d"
@@ -110,6 +122,10 @@
       "type": "WEB",
       "url": "https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/warp-tech/russh/commit/1aa340a7df1d5be1c0f4a9e247aade76dfdd2951"
@@ -130,6 +146,10 @@
       "type": "WEB",
       "url": "https://bugzilla.suse.com/show_bug.cgi?id=1217950"
     },
+    {
+      "type": "WEB",
+      "url": "https://crates.io/crates/thrussh/versions"
+    },
     {
       "type": "WEB",
       "url": "https://forum.netgate.com/topic/184941/terrapin-ssh-attack"
@@ -138,10 +158,18 @@
       "type": "WEB",
       "url": "https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/TeraTermProject/teraterm/releases/tag/v5.1"
+    },
     {
       "type": "ADVISORY",
       "url": "https://github.com/advisories/GHSA-45x7-px36-x8w8"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/drakkan/sftpgo/releases/tag/v2.5.6"
@@ -158,10 +186,18 @@
       "type": "WEB",
       "url": "https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/openssh/openssh-portable/commits/master"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/rapier1/hpn-ssh/releases"
@@ -210,6 +246,10 @@
       "type": "WEB",
       "url": "https://matt.ucc.asn.au/dropbear/CHANGES"
     },
+    {
+      "type": "WEB",
+      "url": "https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC"
+    },
     {
       "type": "WEB",
       "url": "https://news.ycombinator.com/item?id=38684904"
@@ -218,6 +258,10 @@
       "type": "WEB",
       "url": "https://news.ycombinator.com/item?id=38685286"
     },
+    {
+      "type": "WEB",
+      "url": "https://oryx-embedded.com/download/#changelog"
+    },
     {
       "type": "WEB",
       "url": "https://security-tracker.debian.org/tracker/CVE-2023-48795"
@@ -250,6 +294,14 @@
       "type": "WEB",
       "url": "https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html"
     },
+    {
+      "type": "WEB",
+      "url": "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.netsarang.com/en/xshell-update-history/"
+    },
     {
       "type": "WEB",
       "url": "https://www.openssh.com/openbsd.html"
@@ -262,6 +314,10 @@
       "type": "WEB",
       "url": "https://www.openwall.com/lists/oss-security/2023/12/18/2"
     },
+    {
+      "type": "WEB",
+      "url": "https://www.paramiko.org/changelog.html"
+    },
     {
       "type": "WEB",
       "url": "https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/"

advisories/github-reviewed/2023/12/GHSA-qj86-p74r-7wp5/GHSA-qj86-p74r-7wp5.json

@@ -117,6 +117,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-94",
       "CWE-95"
     ],
     "severity": "CRITICAL",