diff --git a/advisories/github-reviewed/2024/03/GHSA-78hx-gp6g-7mj6/GHSA-78hx-gp6g-7mj6.json b/advisories/github-reviewed/2024/03/GHSA-78hx-gp6g-7mj6/GHSA-78hx-gp6g-7mj6.json index e80ee7a782b..1f73a6ab39a 100644 --- a/advisories/github-reviewed/2024/03/GHSA-78hx-gp6g-7mj6/GHSA-78hx-gp6g-7mj6.json +++ b/advisories/github-reviewed/2024/03/GHSA-78hx-gp6g-7mj6/GHSA-78hx-gp6g-7mj6.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-78hx-gp6g-7mj6", - "modified": "2024-03-20T18:10:36Z", + "modified": "2024-03-21T14:05:19Z", "published": "2024-03-20T18:10:36Z", "aliases": [ "CVE-2024-1394" @@ -66,11 +66,14 @@ "introduced": "0" }, { - "last_affected": "2.0.0" + "fixed": "2.0.1" } ] } - ] + ], + "database_specific": { + "last_known_affected_version_range": "<= 2.0.0" + } }, { "package": { @@ -90,6 +93,28 @@ ] } ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/microsoft/go-crypto-openssl/openssl" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.2.9" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 0.2.8" + } } ], "references": [ @@ -101,9 +126,21 @@ "type": "WEB", "url": "https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136" }, + { + "type": "WEB", + "url": "https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f" + }, { "type": "PACKAGE", "url": "https://github.com/golang-fips/openssl" + }, + { + "type": "WEB", + "url": "https://github.com/golang-fips/openssl/releases/tag/v2.0.1" + }, + { + "type": "WEB", + "url": "https://github.com/microsoft/go-crypto-openssl/releases/tag/v0.2.9" } ], "database_specific": {