From aeb523a3e2bced693982fd1ec0f43f73499e7cd5 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 20 May 2024 21:52:51 +0000 Subject: [PATCH] Publish Advisories GHSA-qwqv-rqgf-8qh8 GHSA-735r-hv67-g38f GHSA-xq3x-grrj-fj6x GHSA-w7jw-q4fg-qc4c GHSA-qjcv-rx3v-7mvj --- .../GHSA-qwqv-rqgf-8qh8.json | 6 +- .../GHSA-735r-hv67-g38f.json | 2 +- .../GHSA-xq3x-grrj-fj6x.json | 6 +- .../GHSA-w7jw-q4fg-qc4c.json | 8 +- .../GHSA-qjcv-rx3v-7mvj.json | 256 ++++++++++++++++++ 5 files changed, 261 insertions(+), 17 deletions(-) create mode 100644 advisories/github-reviewed/2024/05/GHSA-qjcv-rx3v-7mvj/GHSA-qjcv-rx3v-7mvj.json diff --git a/advisories/github-reviewed/2023/03/GHSA-qwqv-rqgf-8qh8/GHSA-qwqv-rqgf-8qh8.json b/advisories/github-reviewed/2023/03/GHSA-qwqv-rqgf-8qh8/GHSA-qwqv-rqgf-8qh8.json index e391d143af2..01e71c5730f 100644 --- a/advisories/github-reviewed/2023/03/GHSA-qwqv-rqgf-8qh8/GHSA-qwqv-rqgf-8qh8.json +++ b/advisories/github-reviewed/2023/03/GHSA-qwqv-rqgf-8qh8/GHSA-qwqv-rqgf-8qh8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-qwqv-rqgf-8qh8", - "modified": "2023-04-04T15:30:26Z", + "modified": "2024-05-20T21:50:04Z", "published": "2023-03-27T21:30:26Z", "aliases": [ "CVE-2023-0778" @@ -60,10 +60,6 @@ "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2168256" }, - { - "type": "ADVISORY", - "url": "https://github.com/advisories/GHSA-qwqv-rqgf-8qh8" - }, { "type": "PACKAGE", "url": "https://github.com/containers/podman" diff --git a/advisories/github-reviewed/2023/04/GHSA-735r-hv67-g38f/GHSA-735r-hv67-g38f.json b/advisories/github-reviewed/2023/04/GHSA-735r-hv67-g38f/GHSA-735r-hv67-g38f.json index 87687223bfc..e10d8094893 100644 --- a/advisories/github-reviewed/2023/04/GHSA-735r-hv67-g38f/GHSA-735r-hv67-g38f.json +++ b/advisories/github-reviewed/2023/04/GHSA-735r-hv67-g38f/GHSA-735r-hv67-g38f.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-735r-hv67-g38f", - "modified": "2023-04-14T21:34:56Z", + "modified": "2024-05-20T21:51:28Z", "published": "2023-04-11T21:12:42Z", "aliases": [ "CVE-2023-29194" diff --git a/advisories/github-reviewed/2023/04/GHSA-xq3x-grrj-fj6x/GHSA-xq3x-grrj-fj6x.json b/advisories/github-reviewed/2023/04/GHSA-xq3x-grrj-fj6x/GHSA-xq3x-grrj-fj6x.json index ffa9a7cf8e6..0b8c6dcc854 100644 --- a/advisories/github-reviewed/2023/04/GHSA-xq3x-grrj-fj6x/GHSA-xq3x-grrj-fj6x.json +++ b/advisories/github-reviewed/2023/04/GHSA-xq3x-grrj-fj6x/GHSA-xq3x-grrj-fj6x.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-xq3x-grrj-fj6x", - "modified": "2024-02-13T18:13:10Z", + "modified": "2024-05-20T21:50:28Z", "published": "2023-04-02T12:30:16Z", "aliases": [ "CVE-2023-1800" @@ -44,10 +44,6 @@ "type": "WEB", "url": "https://github.com/sjqzhang/go-fastdfs/commit/61cbff5124c61e292994099372b11c06cdb5b80b" }, - { - "type": "ADVISORY", - "url": "https://github.com/advisories/GHSA-xq3x-grrj-fj6x" - }, { "type": "PACKAGE", "url": "https://github.com/sjqzhang/go-fastdfs" diff --git a/advisories/github-reviewed/2023/05/GHSA-w7jw-q4fg-qc4c/GHSA-w7jw-q4fg-qc4c.json b/advisories/github-reviewed/2023/05/GHSA-w7jw-q4fg-qc4c/GHSA-w7jw-q4fg-qc4c.json index b2379621549..72aff436894 100644 --- a/advisories/github-reviewed/2023/05/GHSA-w7jw-q4fg-qc4c/GHSA-w7jw-q4fg-qc4c.json +++ b/advisories/github-reviewed/2023/05/GHSA-w7jw-q4fg-qc4c/GHSA-w7jw-q4fg-qc4c.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-w7jw-q4fg-qc4c", - "modified": "2023-05-24T17:30:16Z", + "modified": "2024-05-20T21:52:23Z", "published": "2023-05-24T17:30:16Z", "aliases": [ "CVE-2023-32698" @@ -47,7 +47,7 @@ "introduced": "0.1.0" }, { - "fixed": "2.29.0" + "last_affected": "1.10.3" } ] } @@ -67,10 +67,6 @@ "type": "WEB", "url": "https://github.com/goreleaser/nfpm/commit/ed9abdf63d5012cc884f2a83b4ab2b42b3680d30" }, - { - "type": "ADVISORY", - "url": "https://github.com/advisories/GHSA-w7jw-q4fg-qc4c" - }, { "type": "PACKAGE", "url": "https://github.com/goreleaser/nfpm" diff --git a/advisories/github-reviewed/2024/05/GHSA-qjcv-rx3v-7mvj/GHSA-qjcv-rx3v-7mvj.json b/advisories/github-reviewed/2024/05/GHSA-qjcv-rx3v-7mvj/GHSA-qjcv-rx3v-7mvj.json new file mode 100644 index 00000000000..992b571ad19 --- /dev/null +++ b/advisories/github-reviewed/2024/05/GHSA-qjcv-rx3v-7mvj/GHSA-qjcv-rx3v-7mvj.json @@ -0,0 +1,256 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qjcv-rx3v-7mvj", + "modified": "2024-05-20T21:51:33Z", + "published": "2024-05-20T21:51:33Z", + "aliases": [ + + ], + "summary": "github.com/cosmos/ibc-go affected by IBC protocol \"Huckleberry\" vulnerability", + "details": "The ibc-go module is affected by the Inter-Blockchain Communication (IBC) protocol \"Huckleberry\" vulnerability.", + "severity": [ + + ], + "affected": [ + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/ibc-go/v7" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "7.0.1" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/ibc-go/v6" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "6.1.1" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/ibc-go/v5" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "5.2.1" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/ibc-go/v5" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "5.3.0" + }, + { + "fixed": "5.3.1" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/ibc-go/v4" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "4.1.3" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/ibc-go/v4" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.2.0" + }, + { + "fixed": "4.2.2" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/ibc-go/v4" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.3.0" + }, + { + "fixed": "4.3.1" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/ibc-go/v4" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.4.0" + }, + { + "fixed": "4.4.1" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/ibc-go/v3" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "3.4.0" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/ibc-go/v2" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "2.5.0" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/cosmos/ibc-go" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "1.5.0" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/cosmos/ibc-go/issues/1532" + }, + { + "type": "WEB", + "url": "https://forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731" + }, + { + "type": "PACKAGE", + "url": "https://github.com/cosmos/ibc-go" + }, + { + "type": "WEB", + "url": "https://github.com/cosmos/ibc-go/releases/tag/v6.1.1" + }, + { + "type": "WEB", + "url": "https://pkg.go.dev/vuln/GO-2023-1860" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-05-20T21:51:33Z", + "nvd_published_at": null + } +} \ No newline at end of file