github.com/captn3m0/photon-os-advisories.git

author	github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2024-09-25 6:41:50.0 +00:00:00
committer	github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2024-09-25 6:41:50.0 +00:00:00
commit	ed8afc37e7311800ab909a9c5758b3b9b2937760 [patch]
tree	510927e89c88346917d2f29e4dde367d97498af7
parent	dacbd97b03ddcc45193db6856988f9496f9eee65
download	ed8afc37e7311800ab909a9c5758b3b9b2937760.tar.gz
Update Advisories

Diff

 advisories/PHSA-2024-3.0-0797.json | 34 ++++++++++++++++++++++++++++++++++
 advisories/PHSA-2024-4.0-0677.json |  5 +++--
 advisories/PHSA-2024-4.0-0683.json |  5 +++--
 advisories/PHSA-2024-5.0-0305.json |  5 +++--
 advisories/PHSA-2024-5.0-0359.json |  6 ++++--
 advisories/PHSA-2024-5.0-0374.json | 18 +++++++++++++++++-
 advisories/PHSA-2024-5.0-0375.json | 53 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 advisories/PHSA-2024-5.0-0376.json | 52 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 8 files changed, 168 insertions(+), 10 deletions(-)

diff --git a/advisories/PHSA-2024-3.0-0797.json b/advisories/PHSA-2024-3.0-0797.json
new file mode 100644
index 0000000..4fef2c1 100644
--- /dev/null
+++ a/advisories/PHSA-2024-3.0-0797.json
@@ -1,0 +1,34 @@
{
    "affected": [
        {
            "package": {
                "ecosystem": "Photon OS:3.0",
                "name": "ImageMagick",
                "purl": "pkg:rpm/vmware/ImageMagick?distro=photon-3"
            },

            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },

                    {
                        "fixed": "7.1.1.38-1.ph3"
                    }

                ],

                "type": "ECOSYSTEM"
            }

        }

    ],

    "id": "PHSA-2024-3.0-0797",
    "modified": "2024-09-25T06:08:31Z",
    "published": "2024-09-24T00:00:00Z",
    "references": [
        {
            "type": "ADVISORY",
            "url": "https://github.com/vmware/photon/wiki/Security-Update-3.0-797"
        }

    ],

    "related": [
        "CVE-2024-41817"
    ]

}
diff --git a/advisories/PHSA-2024-4.0-0677.json b/advisories/PHSA-2024-4.0-0677.json
index e01fee9..731e257 100644
--- a/advisories/PHSA-2024-4.0-0677.json
+++ a/advisories/PHSA-2024-4.0-0677.json
@@ -56,7 +56,7 @@
        }

    ],

    "id": "PHSA-2024-4.0-0677",
    "modified": "2024-09-20T06:13:41Z",
    "modified": "2024-09-25T06:08:31Z",
    "published": "2024-08-28T00:00:00Z",
    "references": [
        {
@@ -101,6 +101,7 @@
        "CVE-2024-42305",
        "CVE-2024-42276",
        "CVE-2024-42304",
        "CVE-2024-42265"
        "CVE-2024-42265",
        "CVE-2024-43882"
    ]

}
diff --git a/advisories/PHSA-2024-4.0-0683.json b/advisories/PHSA-2024-4.0-0683.json
index 7c1e325..29a2655 100644
--- a/advisories/PHSA-2024-4.0-0683.json
+++ a/advisories/PHSA-2024-4.0-0683.json
@@ -20,7 +20,7 @@
        }

    ],

    "id": "PHSA-2024-4.0-0683",
    "modified": "2024-09-05T05:26:25Z",
    "modified": "2024-09-25T06:08:31Z",
    "published": "2024-09-04T00:00:00Z",
    "references": [
        {
@@ -30,6 +30,7 @@
    ],

    "related": [
        "CVE-2024-8250",
        "CVE-2024-24476"
        "CVE-2024-24476",
        "CVE-2024-8645"
    ]

}
diff --git a/advisories/PHSA-2024-5.0-0305.json b/advisories/PHSA-2024-5.0-0305.json
index 084073b..91f3d5a 100644
--- a/advisories/PHSA-2024-5.0-0305.json
+++ a/advisories/PHSA-2024-5.0-0305.json
@@ -38,7 +38,7 @@
        }

    ],

    "id": "PHSA-2024-5.0-0305",
    "modified": "2024-07-01T11:31:35Z",
    "modified": "2024-09-25T06:08:31Z",
    "published": "2024-06-27T00:00:00Z",
    "references": [
        {
@@ -58,6 +58,7 @@
        "CVE-2024-36971",
        "CVE-2024-39277",
        "CVE-2024-38662",
        "CVE-2024-38780"
        "CVE-2024-38780",
        "CVE-2024-38381"
    ]

}
diff --git a/advisories/PHSA-2024-5.0-0359.json b/advisories/PHSA-2024-5.0-0359.json
index 3875728..4ff1bce 100644
--- a/advisories/PHSA-2024-5.0-0359.json
+++ a/advisories/PHSA-2024-5.0-0359.json
@@ -38,7 +38,7 @@
        }

    ],

    "id": "PHSA-2024-5.0-0359",
    "modified": "2024-09-13T05:26:34Z",
    "modified": "2024-09-25T06:08:31Z",
    "published": "2024-08-28T00:00:00Z",
    "references": [
        {
@@ -111,6 +111,8 @@
        "CVE-2024-42321",
        "CVE-2024-42292",
        "CVE-2024-42312",
        "CVE-2024-42268"
        "CVE-2024-42268",
        "CVE-2024-42258",
        "CVE-2024-42259"
    ]

}
diff --git a/advisories/PHSA-2024-5.0-0374.json b/advisories/PHSA-2024-5.0-0374.json
index f432bc1..96f6ea4 100644
--- a/advisories/PHSA-2024-5.0-0374.json
+++ a/advisories/PHSA-2024-5.0-0374.json
@@ -38,7 +38,7 @@
        }

    ],

    "id": "PHSA-2024-5.0-0374",
    "modified": "2024-09-13T05:26:34Z",
    "modified": "2024-09-25T06:08:31Z",
    "published": "2024-09-13T00:00:00Z",
    "references": [
        {
@@ -53,6 +53,20 @@
        "CVE-2024-44989",
        "CVE-2024-44999",
        "CVE-2024-44986",
        "CVE-2024-44998"
        "CVE-2024-44998",
        "CVE-2024-45008",
        "CVE-2024-45019",
        "CVE-2024-45000",
        "CVE-2024-44995",
        "CVE-2024-45002",
        "CVE-2024-44991",
        "CVE-2024-41098",
        "CVE-2024-45006",
        "CVE-2024-44990",
        "CVE-2024-45003",
        "CVE-2024-45022",
        "CVE-2024-44946",
        "CVE-2024-44983",
        "CVE-2024-44977"
    ]

}
diff --git a/advisories/PHSA-2024-5.0-0375.json b/advisories/PHSA-2024-5.0-0375.json
new file mode 100644
index 0000000..48106ca 100644
--- /dev/null
+++ a/advisories/PHSA-2024-5.0-0375.json
@@ -1,0 +1,53 @@
{
    "affected": [
        {
            "package": {
                "ecosystem": "Photon OS:5.0",
                "name": "runc",
                "purl": "pkg:rpm/vmware/runc?distro=photon-5"
            },

            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },

                    {
                        "fixed": "1.1.14-1.ph5"
                    }

                ],

                "type": "ECOSYSTEM"
            }

        },

        {
            "package": {
                "ecosystem": "Photon OS:5.0",
                "name": "apr",
                "purl": "pkg:rpm/vmware/apr?distro=photon-5"
            },

            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },

                    {
                        "fixed": "1.7.5-1.ph5"
                    }

                ],

                "type": "ECOSYSTEM"
            }

        }

    ],

    "id": "PHSA-2024-5.0-0375",
    "modified": "2024-09-25T06:08:31Z",
    "published": "2024-09-13T00:00:00Z",
    "references": [
        {
            "type": "ADVISORY",
            "url": "https://github.com/vmware/photon/wiki/Security-Update-5.0-375"
        }

    ],

    "related": [
        "CVE-2024-45310",
        "CVE-2023-49582"
    ]

}
diff --git a/advisories/PHSA-2024-5.0-0376.json b/advisories/PHSA-2024-5.0-0376.json
new file mode 100644
index 0000000..dca3a9b 100644
--- /dev/null
+++ a/advisories/PHSA-2024-5.0-0376.json
@@ -1,0 +1,52 @@
{
    "affected": [
        {
            "package": {
                "ecosystem": "Photon OS:5.0",
                "name": "linux-rt",
                "purl": "pkg:rpm/vmware/linux-rt?distro=photon-5"
            },

            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },

                    {
                        "fixed": "6.1.109-2.ph5"
                    }

                ],

                "type": "ECOSYSTEM"
            }

        },

        {
            "package": {
                "ecosystem": "Photon OS:5.0",
                "name": "linux",
                "purl": "pkg:rpm/vmware/linux?distro=photon-5"
            },

            "ranges": {
                "events": [
                    {
                        "introduced": "0"
                    },

                    {
                        "fixed": "6.1.109-2.ph5"
                    }

                ],

                "type": "ECOSYSTEM"
            }

        }

    ],

    "id": "PHSA-2024-5.0-0376",
    "modified": "2024-09-25T06:08:31Z",
    "published": "2024-09-13T00:00:00Z",
    "references": [
        {
            "type": "ADVISORY",
            "url": "https://github.com/vmware/photon/wiki/Security-Update-5.0-376"
        }

    ],

    "related": [
        "CVE-2024-24855"
    ]

}