Sync Collecting Fix Commits: Tue Aug 25 05:43:26 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,14 @@
 {
   "vcs_url": "https://github.com/github/advisory-database",
   "vulnerabilities": {
+    "GHSA-V9V8-JP27-55GF": {
+      "5b5d724ee3766995b551719dbb7d2e40c3ee0bd9": "Improve GHSA-v9v8-jp27-55gf",
+      "4aca4b0640f4b58d9335d5a9d7c0d8087a5161e8": "Improve GHSA-v9v8-jp27-55gf"
+    },
+    "GHSA-4P9M-8GC4-RW2H": {
+      "8783d47f79072436398618de2c8c3a9521d5f7c5": "Improve GHSA-4p9m-8gc4-rw2h",
+      "cb8a9c3c832f98977020a6b50f79ad22ce89601e": "Publish Advisories\n\nGHSA-3x4w-mxpf-fhqq\nGHSA-4p9m-8gc4-rw2h\nGHSA-594f-3595-c47v\nGHSA-68j5-4m99-w9w9\nGHSA-rf6x-r45m-xv3w\nGHSA-4p9m-8gc4-rw2h"
+    },
     "GHSA-M2W9-H2MM-79QR": {
       "98b6eea7ae6fa173f3b94507fe0b4ac8cf6f552d": "Publish Advisories\n\nGHSA-m2w9-h2mm-79qr\nGHSA-m2w9-h2mm-79qr"
     },
@@ -405,9 +413,6 @@
     "GHSA-X3F8-2W95-HW4M": {
       "b8710afee8eca3705a7c6379ed688620575235d9": "Improve GHSA-x3f8-2w95-hw4m"
     },
-    "GHSA-V9V8-JP27-55GF": {
-      "4aca4b0640f4b58d9335d5a9d7c0d8087a5161e8": "Improve GHSA-v9v8-jp27-55gf"
-    },
     "GHSA-RRH3-CWWJ-G5MG": {
       "09b384c8e60a57b98be802ac018cf30f55fa30fd": "Improve GHSA-rrh3-cwwj-g5mg",
       "67435d96a488292700f2c947b705b50974da2786": "Improve GHSA-rrh3-cwwj-g5mg"
@@ -44367,9 +44372,6 @@
     "GHSA-XPVF-6QCC-9JQC": {
       "883096e4a4d230fa0d47a7c0d921b97d51f1ef9f": "Publish Advisories\n\nGHSA-2w8x-224x-785m\nGHSA-4663-4mpg-879v\nGHSA-5mr9-crcg-8wh2\nGHSA-8mpm-q7mh-8fvh\nGHSA-cwfj-642j-gfh4\nGHSA-gqv7-j2j8-qmwq\nGHSA-mvpm-v6q4-m2pf\nGHSA-qq9g-96v4-m3cj\nGHSA-xpvf-6qcc-9jqc\nGHSA-5mr9-crcg-8wh2\nGHSA-cwfj-642j-gfh4\nGHSA-gqv7-j2j8-qmwq\nGHSA-xpvf-6qcc-9jqc"
     },
-    "GHSA-4P9M-8GC4-RW2H": {
-      "cb8a9c3c832f98977020a6b50f79ad22ce89601e": "Publish Advisories\n\nGHSA-3x4w-mxpf-fhqq\nGHSA-4p9m-8gc4-rw2h\nGHSA-594f-3595-c47v\nGHSA-68j5-4m99-w9w9\nGHSA-rf6x-r45m-xv3w\nGHSA-4p9m-8gc4-rw2h"
-    },
     "GHSA-594F-3595-C47V": {
       "cb8a9c3c832f98977020a6b50f79ad22ce89601e": "Publish Advisories\n\nGHSA-3x4w-mxpf-fhqq\nGHSA-4p9m-8gc4-rw2h\nGHSA-594f-3595-c47v\nGHSA-68j5-4m99-w9w9\nGHSA-rf6x-r45m-xv3w\nGHSA-4p9m-8gc4-rw2h"
     },

data/fix-commits/gentoo.git-f7ec53e2.json

@@ -1,6 +1,12 @@
 {
   "vcs_url": "https://gitweb.gentoo.org/repo/gentoo.git",
   "vulnerabilities": {
+    "CVE-2026-75900": {
+      "217f49118041ac8f7c54f3130cc5ffdcfe5abaa6": "app-crypt/swtpm: add 0.10.2\n\nFix CVE-2026-75900\n\nBug: https://bugs.gentoo.org/981050\nSigned-off-by: Christopher Byrne <salah.coronya@gmail.com>\nPart-of: https://github.com/gentoo/gentoo/pull/46693\nCloses: https://github.com/gentoo/gentoo/pull/46693\nSigned-off-by: Sam James <sam@gentoo.org>"
+    },
+    "CVE-2026-41992": {
+      "6df401bb7db4d5a5e4cf416388ed08b3f2232631": "app-arch/gzip: fix CVE-2026-41992\n\nAlso, fix a quoting issue in zgrep (https://debbugs.gnu.org/80868) but\nupstream don't consider that a security issue.\n\nBug: https://bugs.gentoo.org/981308\nSigned-off-by: Sam James <sam@gentoo.org>"
+    },
     "CVE-2026-44950": {
       "14b8bbd54067df58ab67d18c6d975c2d1b31870b": "x11-libs/libXfont2: add 2.0.9\n\n- fixes for CVE-2026-44950, CVE-2026-59679\n- fontserver support now disabled by default (upstream change)\n\nBug: https://bugs.gentoo.org/980377\nPart-of: https://codeberg.org/gentoo/gentoo/pulls/1620\nMerges: https://codeberg.org/gentoo/gentoo/pulls/1620\nSigned-off-by: Brett A C Sheffield <bacs@librecast.net>\nSigned-off-by: Matt Turner <mattst88@gentoo.org>"
     },