Merge pull request wolfi-dev#716 from hectorj2f/bunch_of_cvdata

Update a bunch of advisory data
sergio-chainguard · Dec 29, 2023 · eab6a23 · eab6a23
2 parents e9810bb + 51e2d2a
commit eab6a23
Show file tree

Hide file tree

Showing 8 changed files with 89 additions and 8 deletions.
diff --git a/boring-registry.advisories.yaml b/boring-registry.advisories.yaml
@@ -1,4 +1,4 @@
-schema-version: 2.0.1
+schema-version: 2.0.2
 
 package:
   name: boring-registry
@@ -23,3 +23,12 @@ advisories:
         data:
           type: vulnerable-code-not-included-in-package
           note: Only affects Windows
+
+  - id: CVE-2023-48795
+    aliases:
+      - GHSA-45x7-px36-x8w8
+    events:
+      - timestamp: 2023-12-29T21:27:05Z
+        type: fixed
+        data:
+          fixed-version: 0.12.0-r1
diff --git a/caddy.advisories.yaml b/caddy.advisories.yaml
@@ -1,4 +1,4 @@
-schema-version: 2.0.1
+schema-version: 2.0.2
 
 package:
   name: caddy
@@ -41,3 +41,12 @@ advisories:
         data:
           type: vulnerable-code-not-included-in-package
           note: Only affects Windows
+
+  - id: CVE-2023-48795
+    aliases:
+      - GHSA-45x7-px36-x8w8
+    events:
+      - timestamp: 2023-12-29T21:28:59Z
+        type: fixed
+        data:
+          fixed-version: 2.7.6-r1
diff --git a/crossplane.advisories.yaml b/crossplane.advisories.yaml
@@ -1,4 +1,4 @@
-schema-version: 2.0.1
+schema-version: 2.0.2
 
 package:
   name: crossplane
@@ -23,3 +23,12 @@ advisories:
         data:
           type: vulnerable-code-not-included-in-package
           note: Only affects Windows
+
+  - id: CVE-2023-48795
+    aliases:
+      - GHSA-45x7-px36-x8w8
+    events:
+      - timestamp: 2023-12-29T21:26:15Z
+        type: fixed
+        data:
+          fixed-version: 1.14.5-r1
diff --git a/falcoctl.advisories.yaml b/falcoctl.advisories.yaml
@@ -1,4 +1,4 @@
-schema-version: 2.0.1
+schema-version: 2.0.2
 
 package:
   name: falcoctl
@@ -41,3 +41,12 @@ advisories:
         data:
           type: vulnerable-code-not-included-in-package
           note: Only affects Windows
+
+  - id: CVE-2023-48795
+    aliases:
+      - GHSA-45x7-px36-x8w8
+    events:
+      - timestamp: 2023-12-29T21:30:16Z
+        type: fixed
+        data:
+          fixed-version: 0.6.2-r7
diff --git a/gitlab-shell.advisories.yaml b/gitlab-shell.advisories.yaml
@@ -1,4 +1,4 @@
-schema-version: 2.0.1
+schema-version: 2.0.2
 
 package:
   name: gitlab-shell
@@ -41,3 +41,14 @@ advisories:
         data:
           type: vulnerable-code-not-included-in-package
           note: Only affects Windows
+
+  - id: GHSA-45x7-px36-x8w8
+    events:
+      - timestamp: 2023-12-29T21:35:56Z
+        type: fixed
+        data:
+          fixed-version: 14.32.0-r1
+      - timestamp: 2023-12-29T21:36:27Z
+        type: fixed
+        data:
+          fixed-version: 14.32.0-r1
diff --git a/kubevela.advisories.yaml b/kubevela.advisories.yaml
@@ -1,4 +1,4 @@
-schema-version: 2.0.1
+schema-version: 2.0.2
 
 package:
   name: kubevela
@@ -89,6 +89,15 @@ advisories:
         data:
           fixed-version: 1.9.7-r3
 
+  - id: CVE-2023-49568
+    aliases:
+      - GHSA-mw99-9chc-xw7r
+    events:
+      - timestamp: 2023-12-29T21:30:50Z
+        type: fixed
+        data:
+          fixed-version: 1.9.7-r4
+
   - id: GHSA-6xv5-86q9-7xr8
     events:
       - timestamp: 2023-09-09T15:18:17Z
@@ -97,6 +106,13 @@ advisories:
           type: vulnerable-code-not-included-in-package
           note: This vulnerability is only present on Windows.
 
+  - id: GHSA-7ww5-4wqc-m92c
+    events:
+      - timestamp: 2023-12-29T21:30:40Z
+        type: fixed
+        data:
+          fixed-version: 1.9.7-r4
+
   - id: GHSA-m425-mq94-257g
     events:
       - timestamp: 2023-12-09T03:35:09Z

diff --git a/kubewatch.advisories.yaml b/kubewatch.advisories.yaml
@@ -1,4 +1,4 @@
-schema-version: 2.0.1
+schema-version: 2.0.2
 
 package:
   name: kubewatch
@@ -50,3 +50,12 @@ advisories:
         data:
           type: vulnerable-code-not-included-in-package
           note: Only affects Windows
+
+  - id: CVE-2023-48795
+    aliases:
+      - GHSA-45x7-px36-x8w8
+    events:
+      - timestamp: 2023-12-29T21:29:44Z
+        type: fixed
+        data:
+          fixed-version: 2.5.0-r9
diff --git a/weaviate.advisories.yaml b/weaviate.advisories.yaml
@@ -1,4 +1,4 @@
-schema-version: 2.0.1
+schema-version: 2.0.2
 
 package:
   name: weaviate
@@ -51,3 +51,12 @@ advisories:
         data:
           type: vulnerable-code-not-included-in-package
           note: Only affects Windows
+
+  - id: CVE-2023-48795
+    aliases:
+      - GHSA-45x7-px36-x8w8
+    events:
+      - timestamp: 2023-12-29T21:32:38Z
+        type: fixed
+        data:
+          fixed-version: 1.23.0-r1