From b16b5233df25afd1a1010e9bc6c52f5a64c705f8 Mon Sep 17 00:00:00 2001
From: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Date: Mon, 05 May 2025 17:39:03 +0000
Subject: [PATCH] Update Advisories
---
advisories/PHSA-2025-4.0-0788.json | 6 ++++--
advisories/PHSA-2025-4.0-0789.json | 37 +++++++++++++++++++++++++++++++++++++
advisories/PHSA-2025-4.0-0790.json | 60 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
advisories/PHSA-2025-5.0-0481.json | 5 +++--
advisories/PHSA-2025-5.0-0511.json | 26 ++++++++++++++++++++++++++
advisories/PHSA-2025-5.0-0512.json | 53 +++++++++++++++++++++++++++++++++++++++++++++++++++++
advisories/PHSA-2025-5.0-0514.json | 36 ++++++++++++++++++++++++++++++++++++
advisories/PHSA-2025-5.0-0515.json | 36 ++++++++++++++++++++++++++++++++++++
8 files changed, 251 insertions(+), 8 deletions(-)
diff --git a/advisories/PHSA-2025-4.0-0788.json b/advisories/PHSA-2025-4.0-0788.json
index 8b1055d..ce4e5f0 100644
--- a/advisories/PHSA-2025-4.0-0788.json
+++ a/advisories/PHSA-2025-4.0-0788.json
@@ -22,7 +22,7 @@
}
],
"id": "PHSA-2025-4.0-0788",
- "modified": "2025-04-26T05:29:33Z",
+ "modified": "2025-05-05T05:28:45Z",
"published": "2025-04-24T00:00:00Z",
"references": [
{
@@ -32,6 +32,8 @@
],
"related": [
"CVE-2023-25577",
- "CVE-2023-23934"
+ "CVE-2023-23934",
+ "CVE-2024-49767",
+ "CVE-2023-46136"
]
}diff --git a/advisories/PHSA-2025-4.0-0789.json b/advisories/PHSA-2025-4.0-0789.json
new file mode 100644
index 0000000..b2489eb 100644
--- /dev/null
+++ a/advisories/PHSA-2025-4.0-0789.json
@@ -1,0 +1,37 @@
+{
+ "affected": [
+ {
+ "package": {
+ "ecosystem": "Photon OS:4.0",
+ "name": "frr",
+ "purl": "pkg:rpm/vmware/frr?distro=photon-4"
+ },
+ "ranges": [
+ {
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "10.2.1-1.ph4"
+ }
+ ],
+ "type": "ECOSYSTEM"
+ }
+ ]
+ }
+ ],
+ "id": "PHSA-2025-4.0-0789",
+ "modified": "2025-05-05T05:28:45Z",
+ "published": "2025-04-25T00:00:00Z",
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://github.com/vmware/photon/wiki/Security-Update-4.0-789"
+ }
+ ],
+ "related": [
+ "CVE-2024-44070",
+ "CVE-2024-34088"
+ ]
+}diff --git a/advisories/PHSA-2025-4.0-0790.json b/advisories/PHSA-2025-4.0-0790.json
new file mode 100644
index 0000000..c3185ed 100644
--- /dev/null
+++ a/advisories/PHSA-2025-4.0-0790.json
@@ -1,0 +1,60 @@
+{
+ "affected": [
+ {
+ "package": {
+ "ecosystem": "Photon OS:4.0",
+ "name": "linux",
+ "purl": "pkg:rpm/vmware/linux?distro=photon-4"
+ },
+ "ranges": [
+ {
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "5.10.236-1.ph4"
+ }
+ ],
+ "type": "ECOSYSTEM"
+ }
+ ]
+ },
+ {
+ "package": {
+ "ecosystem": "Photon OS:4.0",
+ "name": "openssh",
+ "purl": "pkg:rpm/vmware/openssh?distro=photon-4"
+ },
+ "ranges": [
+ {
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "8.9p1-10.ph4"
+ }
+ ],
+ "type": "ECOSYSTEM"
+ }
+ ]
+ }
+ ],
+ "id": "PHSA-2025-4.0-0790",
+ "modified": "2025-05-05T05:28:45Z",
+ "published": "2025-05-01T00:00:00Z",
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://github.com/vmware/photon/wiki/Security-Update-4.0-790"
+ }
+ ],
+ "related": [
+ "CVE-2025-32728",
+ "CVE-2025-22063",
+ "CVE-2025-21999",
+ "CVE-2025-22075",
+ "CVE-2025-22086"
+ ]
+}diff --git a/advisories/PHSA-2025-5.0-0481.json b/advisories/PHSA-2025-5.0-0481.json
index 39be792..3f702b2 100644
--- a/advisories/PHSA-2025-5.0-0481.json
+++ a/advisories/PHSA-2025-5.0-0481.json
@@ -22,7 +22,7 @@
}
],
"id": "PHSA-2025-5.0-0481",
- "modified": "2025-03-27T05:29:58Z",
+ "modified": "2025-05-05T05:28:45Z",
"published": "2025-03-02T00:00:00Z",
"references": [
{
@@ -50,6 +50,7 @@
"CVE-2025-0622",
"CVE-2025-0689",
"CVE-2024-45777",
- "CVE-2025-0686"
+ "CVE-2025-0686",
+ "CVE-2025-0624"
]
}diff --git a/advisories/PHSA-2025-5.0-0511.json b/advisories/PHSA-2025-5.0-0511.json
index c6b41e0..639a9f3 100644
--- a/advisories/PHSA-2025-5.0-0511.json
+++ a/advisories/PHSA-2025-5.0-0511.json
@@ -19,10 +19,30 @@
"type": "ECOSYSTEM"
}
]
+ },
+ {
+ "package": {
+ "ecosystem": "Photon OS:5.0",
+ "name": "bindutils",
+ "purl": "pkg:rpm/vmware/bindutils?distro=photon-5"
+ },
+ "ranges": [
+ {
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "9.20.7-1.ph5"
+ }
+ ],
+ "type": "ECOSYSTEM"
+ }
+ ]
}
],
"id": "PHSA-2025-5.0-0511",
- "modified": "2025-04-26T05:29:33Z",
+ "modified": "2025-05-05T05:28:45Z",
"published": "2025-04-24T00:00:00Z",
"references": [
{
@@ -34,6 +54,8 @@
"CVE-2023-25577",
"CVE-2024-49767",
"CVE-2023-46136",
- "CVE-2023-23934"
+ "CVE-2023-23934",
+ "CVE-2024-11187",
+ "CVE-2024-12705"
]
}diff --git a/advisories/PHSA-2025-5.0-0512.json b/advisories/PHSA-2025-5.0-0512.json
index 96241f5..193497e 100644
--- a/advisories/PHSA-2025-5.0-0512.json
+++ a/advisories/PHSA-2025-5.0-0512.json
@@ -39,10 +39,50 @@
"type": "ECOSYSTEM"
}
]
+ },
+ {
+ "package": {
+ "ecosystem": "Photon OS:5.0",
+ "name": "emacs",
+ "purl": "pkg:rpm/vmware/emacs?distro=photon-5"
+ },
+ "ranges": [
+ {
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "30.1-1.ph5"
+ }
+ ],
+ "type": "ECOSYSTEM"
+ }
+ ]
+ },
+ {
+ "package": {
+ "ecosystem": "Photon OS:5.0",
+ "name": "linux",
+ "purl": "pkg:rpm/vmware/linux?distro=photon-5"
+ },
+ "ranges": [
+ {
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "6.1.133-1.ph5"
+ }
+ ],
+ "type": "ECOSYSTEM"
+ }
+ ]
}
],
"id": "PHSA-2025-5.0-0512",
- "modified": "2025-04-25T05:30:00Z",
+ "modified": "2025-05-05T05:28:45Z",
"published": "2025-04-24T00:00:00Z",
"references": [
{
@@ -52,6 +92,15 @@
],
"related": [
"CVE-2025-32415",
- "CVE-2024-3772"
+ "CVE-2024-3772",
+ "CVE-2024-30202",
+ "CVE-2024-30205",
+ "CVE-2024-30204",
+ "CVE-2025-21759",
+ "CVE-2024-30203",
+ "CVE-2025-21739",
+ "CVE-2024-53920",
+ "CVE-2025-1244",
+ "CVE-2025-21714"
]
}diff --git a/advisories/PHSA-2025-5.0-0514.json b/advisories/PHSA-2025-5.0-0514.json
new file mode 100644
index 0000000..19e87a8 100644
--- /dev/null
+++ a/advisories/PHSA-2025-5.0-0514.json
@@ -1,0 +1,36 @@
+{
+ "affected": [
+ {
+ "package": {
+ "ecosystem": "Photon OS:5.0",
+ "name": "perl",
+ "purl": "pkg:rpm/vmware/perl?distro=photon-5"
+ },
+ "ranges": [
+ {
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "5.36.0-8.ph5"
+ }
+ ],
+ "type": "ECOSYSTEM"
+ }
+ ]
+ }
+ ],
+ "id": "PHSA-2025-5.0-0514",
+ "modified": "2025-05-05T05:28:45Z",
+ "published": "2025-04-28T00:00:00Z",
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://github.com/vmware/photon/wiki/Security-Update-5.0-514"
+ }
+ ],
+ "related": [
+ "CVE-2024-56406"
+ ]
+}diff --git a/advisories/PHSA-2025-5.0-0515.json b/advisories/PHSA-2025-5.0-0515.json
new file mode 100644
index 0000000..4dc9474 100644
--- /dev/null
+++ a/advisories/PHSA-2025-5.0-0515.json
@@ -1,0 +1,36 @@
+{
+ "affected": [
+ {
+ "package": {
+ "ecosystem": "Photon OS:5.0",
+ "name": "openssh",
+ "purl": "pkg:rpm/vmware/openssh?distro=photon-5"
+ },
+ "ranges": [
+ {
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "9.3p2-13.ph5"
+ }
+ ],
+ "type": "ECOSYSTEM"
+ }
+ ]
+ }
+ ],
+ "id": "PHSA-2025-5.0-0515",
+ "modified": "2025-05-05T05:28:45Z",
+ "published": "2025-05-02T00:00:00Z",
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://github.com/vmware/photon/wiki/Security-Update-5.0-515"
+ }
+ ],
+ "related": [
+ "CVE-2025-32728"
+ ]
+}--
rgit 0.1.5