From de282cbc84d1ad453a98c12ca590332950faf2f7 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Wed, 12 Jul 2023 23:37:40 +0000 Subject: [PATCH] Update Advisories --- advisories/PHSA-2019-3.0-0041.json | 5 ++- advisories/PHSA-2023-3.0-0585.json | 5 ++- advisories/PHSA-2023-3.0-0608.json | 12 +++++- advisories/PHSA-2023-3.0-0611.json | 68 ++++++++++++++++++++++++++++++ advisories/PHSA-2023-4.0-0415.json | 11 ++++- advisories/PHSA-2023-4.0-0420.json | 5 ++- advisories/PHSA-2023-4.0-0425.json | 39 +++++++++++++++++ photon-wiki | 2 +- 8 files changed, 136 insertions(+), 11 deletions(-) create mode 100644 advisories/PHSA-2023-3.0-0611.json create mode 100644 advisories/PHSA-2023-4.0-0425.json diff --git a/advisories/PHSA-2019-3.0-0041.json b/advisories/PHSA-2019-3.0-0041.json index d0d024d..124adbb 100644 --- a/advisories/PHSA-2019-3.0-0041.json +++ b/advisories/PHSA-2019-3.0-0041.json @@ -92,7 +92,7 @@ } ], "id": "PHSA-2019-3.0-0041", - "modified": "2023-06-14T04:33:14Z", + "modified": "2023-07-12T23:06:35Z", "published": "2019-11-19T00:00:00Z", "references": [ { @@ -107,6 +107,7 @@ "CVE-2019-19529", "CVE-2019-18282", "CVE-2019-18408", - "CVE-2018-12207" + "CVE-2018-12207", + "CVE-2019-11135" ] } \ No newline at end of file diff --git a/advisories/PHSA-2023-3.0-0585.json b/advisories/PHSA-2023-3.0-0585.json index fbd21d9..43d36d0 100644 --- a/advisories/PHSA-2023-3.0-0585.json +++ b/advisories/PHSA-2023-3.0-0585.json @@ -92,7 +92,7 @@ } ], "id": "PHSA-2023-3.0-0585", - "modified": "2023-06-06T05:26:16Z", + "modified": "2023-07-12T23:06:35Z", "published": "2023-05-24T00:00:00Z", "references": [ { @@ -109,6 +109,7 @@ "CVE-2023-31436", "CVE-2023-2513", "CVE-2023-32233", - "CVE-2023-1859" + "CVE-2023-1859", + "CVE-2023-34256" ] } \ No newline at end of file diff --git a/advisories/PHSA-2023-3.0-0608.json b/advisories/PHSA-2023-3.0-0608.json index 49c9f0b..bab0cb4 100644 --- a/advisories/PHSA-2023-3.0-0608.json +++ b/advisories/PHSA-2023-3.0-0608.json @@ -49,10 +49,17 @@ ], "type": "ECOSYSTEM" } + }, + { + "package": { + "ecosystem": "Photon OS:3.0", + "name": "linux", + "purl": "pkg:rpm/vmware/linux?distro=photon-3" + } } ], "id": "PHSA-2023-3.0-0608", - "modified": "2023-07-06T18:38:06Z", + "modified": "2023-07-12T23:06:35Z", "published": "2023-07-05T00:00:00Z", "references": [ { @@ -75,6 +82,7 @@ "CVE-2023-27561", "CVE-2020-15115", "CVE-2023-25153", - "CVE-2020-15136" + "CVE-2020-15136", + "CVE-2023-28466" ] } \ No newline at end of file diff --git a/advisories/PHSA-2023-3.0-0611.json b/advisories/PHSA-2023-3.0-0611.json new file mode 100644 index 0000000..c6609a2 --- /dev/null +++ b/advisories/PHSA-2023-3.0-0611.json @@ -0,0 +1,68 @@ +{ + "affected": [ + { + "package": { + "ecosystem": "Photon OS:3.0", + "name": "falco", + "purl": "pkg:rpm/vmware/falco?distro=photon-3" + } + }, + { + "package": { + "ecosystem": "Photon OS:3.0", + "name": "ImageMagick", + "purl": "pkg:rpm/vmware/ImageMagick?distro=photon-3" + } + }, + { + "package": { + "ecosystem": "Photon OS:3.0", + "name": "bzr", + "purl": "pkg:rpm/vmware/bzr?distro=photon-3" + } + }, + { + "package": { + "ecosystem": "Photon OS:3.0", + "name": "tcpdump", + "purl": "pkg:rpm/vmware/tcpdump?distro=photon-3" + } + } + ], + "id": "PHSA-2023-3.0-0611", + "modified": "2023-07-12T23:06:35Z", + "published": "2023-07-12T00:00:00Z", + "references": [ + { + "type": "ADVISORY", + "url": "https://github.com/vmware/photon/wiki/Security-Update-3.0-611" + } + ], + "related": [ + "CVE-2022-32148", + "CVE-2022-24921", + "CVE-2022-27664", + "CVE-2022-1705", + "CVE-2022-30635", + "CVE-2022-29804", + "CVE-2022-1962", + "CVE-2022-30633", + "CVE-2022-32189", + "CVE-2020-8036", + "CVE-2022-41716", + "CVE-2022-23773", + "CVE-2022-2879", + "CVE-2022-23772", + "CVE-2022-30629", + "CVE-2022-28327", + "CVE-2017-14176", + "CVE-2023-3428", + "CVE-2022-28131", + "CVE-2022-30580", + "CVE-2022-41715", + "CVE-2022-30631", + "CVE-2022-30634", + "CVE-2022-30632", + "CVE-2022-30630" + ] +} \ No newline at end of file diff --git a/advisories/PHSA-2023-4.0-0415.json b/advisories/PHSA-2023-4.0-0415.json index 2d8a125..3a5938a 100644 --- a/advisories/PHSA-2023-4.0-0415.json +++ b/advisories/PHSA-2023-4.0-0415.json @@ -127,7 +127,7 @@ } ], "id": "PHSA-2023-4.0-0415", - "modified": "2023-07-03T05:28:04Z", + "modified": "2023-07-12T23:06:35Z", "published": "2023-06-22T00:00:00Z", "references": [ { @@ -161,6 +161,13 @@ "CVE-2023-29404", "CVE-2023-29403", "CVE-2023-29402", - "CVE-2023-29405" + "CVE-2023-29405", + "CVE-2023-24537", + "CVE-2023-24538", + "CVE-2023-24539", + "CVE-2023-24540", + "CVE-2023-24534", + "CVE-2023-29400", + "CVE-2023-24536" ] } \ No newline at end of file diff --git a/advisories/PHSA-2023-4.0-0420.json b/advisories/PHSA-2023-4.0-0420.json index cf5f717..0589e4e 100644 --- a/advisories/PHSA-2023-4.0-0420.json +++ b/advisories/PHSA-2023-4.0-0420.json @@ -152,7 +152,7 @@ } ], "id": "PHSA-2023-4.0-0420", - "modified": "2023-07-06T18:38:09Z", + "modified": "2023-07-12T23:06:35Z", "published": "2023-07-05T00:00:00Z", "references": [ { @@ -184,6 +184,7 @@ "CVE-2016-0755", "CVE-2020-11080", "CVE-2015-8659", - "CVE-2020-15112" + "CVE-2020-15112", + "CVE-2023-28410" ] } \ No newline at end of file diff --git a/advisories/PHSA-2023-4.0-0425.json b/advisories/PHSA-2023-4.0-0425.json new file mode 100644 index 0000000..3e6b4df --- /dev/null +++ b/advisories/PHSA-2023-4.0-0425.json @@ -0,0 +1,39 @@ +{ + "affected": [ + { + "package": { + "ecosystem": "Photon OS:4.0", + "name": "runc", + "purl": "pkg:rpm/vmware/runc?distro=photon-4" + } + }, + { + "package": { + "ecosystem": "Photon OS:4.0", + "name": "cups", + "purl": "pkg:rpm/vmware/cups?distro=photon-4" + } + }, + { + "package": { + "ecosystem": "Photon OS:4.0", + "name": "tar", + "purl": "pkg:rpm/vmware/tar?distro=photon-4" + } + } + ], + "id": "PHSA-2023-4.0-0425", + "modified": "2023-07-12T23:06:35Z", + "published": "2023-07-12T00:00:00Z", + "references": [ + { + "type": "ADVISORY", + "url": "https://github.com/vmware/photon/wiki/Security-Update-4.0-425" + } + ], + "related": [ + "CVE-2018-6553", + "CVE-2023-25809", + "CVE-2022-48303" + ] +} \ No newline at end of file diff --git a/photon-wiki b/photon-wiki index 325397a..c947f40 160000 --- a/photon-wiki +++ b/photon-wiki @@ -1 +1 @@ -Subproject commit 325397aca34d5ce79c646bd69e0fbe0e4b221509 +Subproject commit c947f406697e1495c2416ec22117267595f77af1