From cfc14e56df1553ee056396ef98462f59a6edd62c Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 17 Oct 2024 14:09:38 +0000 Subject: [PATCH] Publish GHSA-9442-gm4v-r222 --- .../GHSA-9442-gm4v-r222.json | 42 ++++++++++++++++++- 1 file changed, 40 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2024/06/GHSA-9442-gm4v-r222/GHSA-9442-gm4v-r222.json b/advisories/github-reviewed/2024/06/GHSA-9442-gm4v-r222/GHSA-9442-gm4v-r222.json index b7034b98629..6c89d75d51e 100644 --- a/advisories/github-reviewed/2024/06/GHSA-9442-gm4v-r222/GHSA-9442-gm4v-r222.json +++ b/advisories/github-reviewed/2024/06/GHSA-9442-gm4v-r222/GHSA-9442-gm4v-r222.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9442-gm4v-r222", - "modified": "2024-09-09T18:30:28Z", + "modified": "2024-10-17T14:08:20Z", "published": "2024-06-20T15:31:19Z", "aliases": [ "CVE-2024-6162" @@ -29,7 +29,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "2.3.0.Alpha1" }, { "fixed": "2.3.14.Final" @@ -37,6 +37,28 @@ ] } ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "io.undertow:undertow-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.3.14.Final" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "< 2.2.33.Final" + } } ], "references": [ @@ -44,6 +66,18 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6162" }, + { + "type": "WEB", + "url": "https://github.com/undertow-io/undertow/pull/1612" + }, + { + "type": "WEB", + "url": "https://github.com/undertow-io/undertow/commit/90f202ada89b6d9883beed0f1fe10c99d470d9a8" + }, + { + "type": "WEB", + "url": "https://github.com/undertow-io/undertow/commit/a28ac53076e2fa532266d25e0c0b1a01d0e9d2cf" + }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2024:1194" @@ -71,6 +105,10 @@ { "type": "WEB", "url": "https://issues.redhat.com/browse/JBEAP-26268" + }, + { + "type": "WEB", + "url": "https://issues.redhat.com/browse/UNDERTOW-2334" } ], "database_specific": {