aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorHiroki Tagato <tagattie@FreeBSD.org>2024-08-18 01:38:42 +0000
committerHiroki Tagato <tagattie@FreeBSD.org>2024-08-18 01:38:42 +0000
commit9434bcc75f7ff202a627f919cc45cee814840da9 (patch)
treeb6abebc7525a86c9539cdeb0b57f536caa2386fb
parenta35c8865a6883be6ecdcec286b7c2a620f69d3e6 (diff)
security/vuxml: document electron{29,30} multiple vulnerabilities
-rw-r--r--security/vuxml/vuln/2024.xml60
1 files changed, 60 insertions, 0 deletions
diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml
index 7cc8cdff2f98..a71d613db0d7 100644
--- a/security/vuxml/vuln/2024.xml
+++ b/security/vuxml/vuln/2024.xml
@@ -1,3 +1,63 @@
+ <vuln vid="ac025402-4cbc-4177-bd99-c20c03a07f23">
+ <topic>electron{29,30} -- multiple vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>electron29</name>
+ <range><lt>29.4.6</lt></range>
+ </package>
+ <package>
+ <name>electron30</name>
+ <range><lt>30.4.0</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Electron developers report:</p>
+ <blockquote cite="https://github.com/electron/electron/releases/tag/v29.4.6">
+ <p>This update fixes the following vulnerabilities:</p>
+ <ul>
+ <li>Security: backported fix for CVE-2024-6776.</li>
+ <li>Security: backported fix for CVE-2024-6778.</li>
+ <li>Security: backported fix for CVE-2024-6777.</li>
+ <li>Security: backported fix for CVE-2024-6773.</li>
+ <li>Security: backported fix for CVE-2024-6774.</li>
+ <li>Security: backported fix for CVE-2024-6772.</li>
+ <li>Security: backported fix for CVE-2024-6775.</li>
+ <li>Security: backported fix for CVE-2024-6779.</li>
+ <li>Security: backported fix for CVE-2024-6989.</li>
+ <li>Security: backported fix for CVE-2024-6991.</li>
+ </ul>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2024-6776</cvename>
+ <url>https://github.com/advisories/GHSA-7hjm-9cg2-rcg6</url>
+ <cvename>CVE-2024-6778</cvename>
+ <url>https://github.com/advisories/GHSA-9m98-937v-r97x</url>
+ <cvename>CVE-2024-6777</cvename>
+ <url>https://github.com/advisories/GHSA-w2v8-c457-cjvf</url>
+ <cvename>CVE-2024-6773</cvename>
+ <url>https://github.com/advisories/GHSA-7gj8-545r-5295</url>
+ <cvename>CVE-2024-6774</cvename>
+ <url>https://github.com/advisories/GHSA-cgm7-mqr6-f7vg</url>
+ <cvename>CVE-2024-6772</cvename>
+ <url>https://github.com/advisories/GHSA-cc8c-62x7-qwjr</url>
+ <cvename>CVE-2024-6775</cvename>
+ <url>https://github.com/advisories/GHSA-mxwm-jm3p-mh5m</url>
+ <cvename>CVE-2024-6779</cvename>
+ <url>https://github.com/advisories/GHSA-v4v9-v4wf-9c86</url>
+ <cvename>CVE-2024-6989</cvename>
+ <url>https://github.com/advisories/GHSA-32j6-235r-7fmm</url>
+ <cvename>CVE-2024-6991</cvename>
+ <url>https://github.com/advisories/GHSA-3v8g-fm64-g4mc</url>
+ </references>
+ <dates>
+ <discovery>2024-08-16</discovery>
+ <entry>2024-08-18</entry>
+ </dates>
+ </vuln>
+
<vuln vid="6a6ad6cb-5c6c-11ef-b456-001e676bf734">
<topic>Dovecot -- DoS</topic>
<affects>