diff --git a/advisories/github-reviewed/2023/11/GHSA-4532-pmx7-9ww7/GHSA-4532-pmx7-9ww7.json b/advisories/github-reviewed/2023/11/GHSA-4532-pmx7-9ww7/GHSA-4532-pmx7-9ww7.json index 5d828aeef67..ded17fd6287 100644 --- a/advisories/github-reviewed/2023/11/GHSA-4532-pmx7-9ww7/GHSA-4532-pmx7-9ww7.json +++ b/advisories/github-reviewed/2023/11/GHSA-4532-pmx7-9ww7/GHSA-4532-pmx7-9ww7.json @@ -1,8 +1,9 @@ { "schema_version": "1.4.0", "id": "GHSA-4532-pmx7-9ww7", - "modified": "2023-12-07T22:40:42Z", + "modified": "2023-12-19T21:49:34Z", "published": "2023-11-14T18:30:27Z", + "withdrawn": "2023-12-19T21:49:34Z", "aliases": [ "CVE-2023-48094" ], diff --git a/advisories/github-reviewed/2023/12/GHSA-45x7-px36-x8w8/GHSA-45x7-px36-x8w8.json b/advisories/github-reviewed/2023/12/GHSA-45x7-px36-x8w8/GHSA-45x7-px36-x8w8.json index a6912d6d6f5..a7b796c37c3 100644 --- a/advisories/github-reviewed/2023/12/GHSA-45x7-px36-x8w8/GHSA-45x7-px36-x8w8.json +++ b/advisories/github-reviewed/2023/12/GHSA-45x7-px36-x8w8/GHSA-45x7-px36-x8w8.json @@ -90,6 +90,14 @@ "type": "WEB", "url": "https://github.com/paramiko/paramiko/issues/2337" }, + { + "type": "WEB", + "url": "https://github.com/proftpd/proftpd/issues/456" + }, + { + "type": "WEB", + "url": "https://github.com/NixOS/nixpkgs/pull/275249" + }, { "type": "WEB", "url": "https://github.com/libssh2/libssh2/pull/1291" @@ -102,6 +110,10 @@ "type": "WEB", "url": "https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0" }, + { + "type": "WEB", + "url": "https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab" + }, { "type": "WEB", "url": "https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d" @@ -110,6 +122,10 @@ "type": "WEB", "url": "https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5" }, + { + "type": "WEB", + "url": "https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3" + }, { "type": "WEB", "url": "https://github.com/warp-tech/russh/commit/1aa340a7df1d5be1c0f4a9e247aade76dfdd2951" @@ -130,6 +146,10 @@ "type": "WEB", "url": "https://bugzilla.suse.com/show_bug.cgi?id=1217950" }, + { + "type": "WEB", + "url": "https://crates.io/crates/thrussh/versions" + }, { "type": "WEB", "url": "https://forum.netgate.com/topic/184941/terrapin-ssh-attack" @@ -138,10 +158,18 @@ "type": "WEB", "url": "https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6" }, + { + "type": "WEB", + "url": "https://github.com/TeraTermProject/teraterm/releases/tag/v5.1" + }, { "type": "ADVISORY", "url": "https://github.com/advisories/GHSA-45x7-px36-x8w8" }, + { + "type": "WEB", + "url": "https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22" + }, { "type": "WEB", "url": "https://github.com/drakkan/sftpgo/releases/tag/v2.5.6" @@ -158,10 +186,18 @@ "type": "WEB", "url": "https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25" }, + { + "type": "WEB", + "url": "https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15" + }, { "type": "WEB", "url": "https://github.com/openssh/openssh-portable/commits/master" }, + { + "type": "WEB", + "url": "https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES" + }, { "type": "WEB", "url": "https://github.com/rapier1/hpn-ssh/releases" @@ -210,6 +246,10 @@ "type": "WEB", "url": "https://matt.ucc.asn.au/dropbear/CHANGES" }, + { + "type": "WEB", + "url": "https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC" + }, { "type": "WEB", "url": "https://news.ycombinator.com/item?id=38684904" @@ -218,6 +258,10 @@ "type": "WEB", "url": "https://news.ycombinator.com/item?id=38685286" }, + { + "type": "WEB", + "url": "https://oryx-embedded.com/download/#changelog" + }, { "type": "WEB", "url": "https://security-tracker.debian.org/tracker/CVE-2023-48795" @@ -250,6 +294,14 @@ "type": "WEB", "url": "https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html" }, + { + "type": "WEB", + "url": "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update" + }, + { + "type": "WEB", + "url": "https://www.netsarang.com/en/xshell-update-history/" + }, { "type": "WEB", "url": "https://www.openssh.com/openbsd.html" @@ -262,6 +314,10 @@ "type": "WEB", "url": "https://www.openwall.com/lists/oss-security/2023/12/18/2" }, + { + "type": "WEB", + "url": "https://www.paramiko.org/changelog.html" + }, { "type": "WEB", "url": "https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/" diff --git a/advisories/github-reviewed/2023/12/GHSA-qj86-p74r-7wp5/GHSA-qj86-p74r-7wp5.json b/advisories/github-reviewed/2023/12/GHSA-qj86-p74r-7wp5/GHSA-qj86-p74r-7wp5.json index fd3d41444ac..7b3933c67b0 100644 --- a/advisories/github-reviewed/2023/12/GHSA-qj86-p74r-7wp5/GHSA-qj86-p74r-7wp5.json +++ b/advisories/github-reviewed/2023/12/GHSA-qj86-p74r-7wp5/GHSA-qj86-p74r-7wp5.json @@ -117,6 +117,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-94", "CWE-95" ], "severity": "CRITICAL",