Skip to content

Commit 25e4fab

Browse files
Sync Collecting Fix Commits: Sat Aug 29 17:45:56 UTC 2026
Signed-off-by: AboutCode Automation <automation@aboutcode.org>
1 parent 4f0c1ba commit 25e4fab

6 files changed

Lines changed: 74 additions & 0 deletions

data/fix-commits/advisory-database-b78f1d41.json

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,54 @@
11
{
22
"vcs_url": "https://github.com/github/advisory-database",
33
"vulnerabilities": {
4+
"GHSA-3P45-HX6J-C7F5": {
5+
"09f6aa18d3d637f82033a13f74fbec69aee846bb": "Publish Advisories\n\nGHSA-3p45-hx6j-c7f5\nGHSA-3wcf-94mw-cwgf\nGHSA-4v5f-2v2r-748m\nGHSA-57gg-9j2p-5v4x\nGHSA-8fpq-5wcx-76h3\nGHSA-hc3c-8h8r-vcg7\nGHSA-jgmr-x24h-q8jj\nGHSA-mgq6-mc59-8j8m\nGHSA-mq4m-44x6-6r2v\nGHSA-p2x5-x87w-v2xj\nGHSA-qcjm-vmrx-v935\nGHSA-qpg9-jg2w-m84x\nGHSA-x5j5-9mrv-74fr"
6+
},
7+
"GHSA-3WCF-94MW-CWGF": {
8+
"09f6aa18d3d637f82033a13f74fbec69aee846bb": "Publish Advisories\n\nGHSA-3p45-hx6j-c7f5\nGHSA-3wcf-94mw-cwgf\nGHSA-4v5f-2v2r-748m\nGHSA-57gg-9j2p-5v4x\nGHSA-8fpq-5wcx-76h3\nGHSA-hc3c-8h8r-vcg7\nGHSA-jgmr-x24h-q8jj\nGHSA-mgq6-mc59-8j8m\nGHSA-mq4m-44x6-6r2v\nGHSA-p2x5-x87w-v2xj\nGHSA-qcjm-vmrx-v935\nGHSA-qpg9-jg2w-m84x\nGHSA-x5j5-9mrv-74fr"
9+
},
10+
"GHSA-4V5F-2V2R-748M": {
11+
"09f6aa18d3d637f82033a13f74fbec69aee846bb": "Publish Advisories\n\nGHSA-3p45-hx6j-c7f5\nGHSA-3wcf-94mw-cwgf\nGHSA-4v5f-2v2r-748m\nGHSA-57gg-9j2p-5v4x\nGHSA-8fpq-5wcx-76h3\nGHSA-hc3c-8h8r-vcg7\nGHSA-jgmr-x24h-q8jj\nGHSA-mgq6-mc59-8j8m\nGHSA-mq4m-44x6-6r2v\nGHSA-p2x5-x87w-v2xj\nGHSA-qcjm-vmrx-v935\nGHSA-qpg9-jg2w-m84x\nGHSA-x5j5-9mrv-74fr"
12+
},
13+
"GHSA-57GG-9J2P-5V4X": {
14+
"09f6aa18d3d637f82033a13f74fbec69aee846bb": "Publish Advisories\n\nGHSA-3p45-hx6j-c7f5\nGHSA-3wcf-94mw-cwgf\nGHSA-4v5f-2v2r-748m\nGHSA-57gg-9j2p-5v4x\nGHSA-8fpq-5wcx-76h3\nGHSA-hc3c-8h8r-vcg7\nGHSA-jgmr-x24h-q8jj\nGHSA-mgq6-mc59-8j8m\nGHSA-mq4m-44x6-6r2v\nGHSA-p2x5-x87w-v2xj\nGHSA-qcjm-vmrx-v935\nGHSA-qpg9-jg2w-m84x\nGHSA-x5j5-9mrv-74fr"
15+
},
16+
"GHSA-8FPQ-5WCX-76H3": {
17+
"09f6aa18d3d637f82033a13f74fbec69aee846bb": "Publish Advisories\n\nGHSA-3p45-hx6j-c7f5\nGHSA-3wcf-94mw-cwgf\nGHSA-4v5f-2v2r-748m\nGHSA-57gg-9j2p-5v4x\nGHSA-8fpq-5wcx-76h3\nGHSA-hc3c-8h8r-vcg7\nGHSA-jgmr-x24h-q8jj\nGHSA-mgq6-mc59-8j8m\nGHSA-mq4m-44x6-6r2v\nGHSA-p2x5-x87w-v2xj\nGHSA-qcjm-vmrx-v935\nGHSA-qpg9-jg2w-m84x\nGHSA-x5j5-9mrv-74fr"
18+
},
19+
"GHSA-HC3C-8H8R-VCG7": {
20+
"09f6aa18d3d637f82033a13f74fbec69aee846bb": "Publish Advisories\n\nGHSA-3p45-hx6j-c7f5\nGHSA-3wcf-94mw-cwgf\nGHSA-4v5f-2v2r-748m\nGHSA-57gg-9j2p-5v4x\nGHSA-8fpq-5wcx-76h3\nGHSA-hc3c-8h8r-vcg7\nGHSA-jgmr-x24h-q8jj\nGHSA-mgq6-mc59-8j8m\nGHSA-mq4m-44x6-6r2v\nGHSA-p2x5-x87w-v2xj\nGHSA-qcjm-vmrx-v935\nGHSA-qpg9-jg2w-m84x\nGHSA-x5j5-9mrv-74fr"
21+
},
22+
"GHSA-JGMR-X24H-Q8JJ": {
23+
"09f6aa18d3d637f82033a13f74fbec69aee846bb": "Publish Advisories\n\nGHSA-3p45-hx6j-c7f5\nGHSA-3wcf-94mw-cwgf\nGHSA-4v5f-2v2r-748m\nGHSA-57gg-9j2p-5v4x\nGHSA-8fpq-5wcx-76h3\nGHSA-hc3c-8h8r-vcg7\nGHSA-jgmr-x24h-q8jj\nGHSA-mgq6-mc59-8j8m\nGHSA-mq4m-44x6-6r2v\nGHSA-p2x5-x87w-v2xj\nGHSA-qcjm-vmrx-v935\nGHSA-qpg9-jg2w-m84x\nGHSA-x5j5-9mrv-74fr"
24+
},
25+
"GHSA-MGQ6-MC59-8J8M": {
26+
"09f6aa18d3d637f82033a13f74fbec69aee846bb": "Publish Advisories\n\nGHSA-3p45-hx6j-c7f5\nGHSA-3wcf-94mw-cwgf\nGHSA-4v5f-2v2r-748m\nGHSA-57gg-9j2p-5v4x\nGHSA-8fpq-5wcx-76h3\nGHSA-hc3c-8h8r-vcg7\nGHSA-jgmr-x24h-q8jj\nGHSA-mgq6-mc59-8j8m\nGHSA-mq4m-44x6-6r2v\nGHSA-p2x5-x87w-v2xj\nGHSA-qcjm-vmrx-v935\nGHSA-qpg9-jg2w-m84x\nGHSA-x5j5-9mrv-74fr"
27+
},
28+
"GHSA-MQ4M-44X6-6R2V": {
29+
"09f6aa18d3d637f82033a13f74fbec69aee846bb": "Publish Advisories\n\nGHSA-3p45-hx6j-c7f5\nGHSA-3wcf-94mw-cwgf\nGHSA-4v5f-2v2r-748m\nGHSA-57gg-9j2p-5v4x\nGHSA-8fpq-5wcx-76h3\nGHSA-hc3c-8h8r-vcg7\nGHSA-jgmr-x24h-q8jj\nGHSA-mgq6-mc59-8j8m\nGHSA-mq4m-44x6-6r2v\nGHSA-p2x5-x87w-v2xj\nGHSA-qcjm-vmrx-v935\nGHSA-qpg9-jg2w-m84x\nGHSA-x5j5-9mrv-74fr"
30+
},
31+
"GHSA-P2X5-X87W-V2XJ": {
32+
"09f6aa18d3d637f82033a13f74fbec69aee846bb": "Publish Advisories\n\nGHSA-3p45-hx6j-c7f5\nGHSA-3wcf-94mw-cwgf\nGHSA-4v5f-2v2r-748m\nGHSA-57gg-9j2p-5v4x\nGHSA-8fpq-5wcx-76h3\nGHSA-hc3c-8h8r-vcg7\nGHSA-jgmr-x24h-q8jj\nGHSA-mgq6-mc59-8j8m\nGHSA-mq4m-44x6-6r2v\nGHSA-p2x5-x87w-v2xj\nGHSA-qcjm-vmrx-v935\nGHSA-qpg9-jg2w-m84x\nGHSA-x5j5-9mrv-74fr"
33+
},
34+
"GHSA-QCJM-VMRX-V935": {
35+
"09f6aa18d3d637f82033a13f74fbec69aee846bb": "Publish Advisories\n\nGHSA-3p45-hx6j-c7f5\nGHSA-3wcf-94mw-cwgf\nGHSA-4v5f-2v2r-748m\nGHSA-57gg-9j2p-5v4x\nGHSA-8fpq-5wcx-76h3\nGHSA-hc3c-8h8r-vcg7\nGHSA-jgmr-x24h-q8jj\nGHSA-mgq6-mc59-8j8m\nGHSA-mq4m-44x6-6r2v\nGHSA-p2x5-x87w-v2xj\nGHSA-qcjm-vmrx-v935\nGHSA-qpg9-jg2w-m84x\nGHSA-x5j5-9mrv-74fr"
36+
},
37+
"GHSA-QPG9-JG2W-M84X": {
38+
"09f6aa18d3d637f82033a13f74fbec69aee846bb": "Publish Advisories\n\nGHSA-3p45-hx6j-c7f5\nGHSA-3wcf-94mw-cwgf\nGHSA-4v5f-2v2r-748m\nGHSA-57gg-9j2p-5v4x\nGHSA-8fpq-5wcx-76h3\nGHSA-hc3c-8h8r-vcg7\nGHSA-jgmr-x24h-q8jj\nGHSA-mgq6-mc59-8j8m\nGHSA-mq4m-44x6-6r2v\nGHSA-p2x5-x87w-v2xj\nGHSA-qcjm-vmrx-v935\nGHSA-qpg9-jg2w-m84x\nGHSA-x5j5-9mrv-74fr"
39+
},
40+
"GHSA-X5J5-9MRV-74FR": {
41+
"09f6aa18d3d637f82033a13f74fbec69aee846bb": "Publish Advisories\n\nGHSA-3p45-hx6j-c7f5\nGHSA-3wcf-94mw-cwgf\nGHSA-4v5f-2v2r-748m\nGHSA-57gg-9j2p-5v4x\nGHSA-8fpq-5wcx-76h3\nGHSA-hc3c-8h8r-vcg7\nGHSA-jgmr-x24h-q8jj\nGHSA-mgq6-mc59-8j8m\nGHSA-mq4m-44x6-6r2v\nGHSA-p2x5-x87w-v2xj\nGHSA-qcjm-vmrx-v935\nGHSA-qpg9-jg2w-m84x\nGHSA-x5j5-9mrv-74fr"
42+
},
43+
"GHSA-V5WH-356J-JG3C": {
44+
"1d76e9ee7a226166751434a88134d51520468037": "Publish Advisories\n\nGHSA-v5wh-356j-jg3c\nGHSA-vgff-mr3q-h6mh\nGHSA-xfj7-7fp8-rhvp"
45+
},
46+
"GHSA-VGFF-MR3Q-H6MH": {
47+
"1d76e9ee7a226166751434a88134d51520468037": "Publish Advisories\n\nGHSA-v5wh-356j-jg3c\nGHSA-vgff-mr3q-h6mh\nGHSA-xfj7-7fp8-rhvp"
48+
},
49+
"GHSA-XFJ7-7FP8-RHVP": {
50+
"1d76e9ee7a226166751434a88134d51520468037": "Publish Advisories\n\nGHSA-v5wh-356j-jg3c\nGHSA-vgff-mr3q-h6mh\nGHSA-xfj7-7fp8-rhvp"
51+
},
452
"GHSA-C9CV-MQ2M-PPP3": {
553
"bbe04cc51191903219dd55a1766de0a3dc5c626a": "Publish GHSA-c9cv-mq2m-ppp3",
654
"58801517d03f41de97da41682eaa8851182adbc7": "Publish GHSA-c9cv-mq2m-ppp3",

data/fix-commits/gentoo.git-f7ec53e2.json

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,9 +2,17 @@
22
"vcs_url": "https://gitweb.gentoo.org/repo/gentoo.git",
33
"vulnerabilities": {
44
"CVE-2026-79619": {
5+
"4d83c9be889b1ccdc79c5c32feb932edba3df2a0": "sys-fs/zfs-kmod: drop 2.1.16\n\nThe 2.1 branch is EOL upstream and has no fix for CVE-2026-79619.\n\nSigned-off-by: Alexander Moch <mail@alexmoch.com>\nPart-of: https://codeberg.org/gentoo/gentoo/pulls/1759\nSigned-off-by: Marc Schiffbauer <mschiff@gentoo.org>",
6+
"694a1efadb2f15ce5612282bb98111bedd8d5746": "sys-fs/zfs: drop 2.1.16\n\nThe 2.1 branch is EOL upstream and has no fix for CVE-2026-79619.\n\nSigned-off-by: Alexander Moch <mail@alexmoch.com>\nPart-of: https://codeberg.org/gentoo/gentoo/pulls/1759\nSigned-off-by: Marc Schiffbauer <mschiff@gentoo.org>",
57
"f94b15491312a8d1e1117294cc491ea311c08c0e": "sys-fs/zfs-kmod: Stabilize 2.2.11, 2.3.9 for amd64, arm64, ppc64\n\nKeep the kernel module in sync with the sys-fs/zfs stabilization for\nCVE-2026-79619.\n\nBug: https://bugs.gentoo.org/981501\nBug: https://bugs.gentoo.org/981514\n\nSigned-off-by: Alexander Moch <mail@alexmoch.com>\nPart-of: https://codeberg.org/gentoo/gentoo/pulls/1753\nMerges: https://codeberg.org/gentoo/gentoo/pulls/1753\nSigned-off-by: Sam James <sam@gentoo.org>",
68
"dd84dfc75eddc0229bdc94bcccc4ee7bb58454fe": "sys-fs/zfs: Stabilize 2.2.11, 2.3.9, 2.4.4 for amd64, arm64, ppc64\n\nFixes CVE-2026-79619 (CVSS 7.3): the Linux ioctl authorization checks\ncan be bypassed by an unprivileged local user via user namespaces,\nallowing pool-administrative operations (create, import, destroy),\naccess to the pool event log and fault injection. Only local access to\n/dev/zfs is required; no prior pool access is needed.\n\nStable keywords match those of the vulnerable versions these replace\n(2.2.8, 2.3.6 and 2.4.3 respectively).\n\nBug: https://bugs.gentoo.org/981501\nBug: https://bugs.gentoo.org/981514\n\nSigned-off-by: Alexander Moch <mail@alexmoch.com>\nPart-of: https://codeberg.org/gentoo/gentoo/pulls/1753\nSigned-off-by: Sam James <sam@gentoo.org>"
79
},
10+
"CVE-2026-80590": {
11+
"eb82fb91e1c416a8f0926004295cbbdcd203abfc": "sys-kernel/gentoo-sources: Stable for Rem Priv Escal per policy\n\nThis version of kernel contains a fix for CVE-2026-80590.\n\nReports state that this exploitation results in privilege escalation and\nthe attack can be launched remotely.\n\nSigned-off-by: Mike Pagano <mpagano@gentoo.org>",
12+
"633477d81f58124551c0477031d49cbebd20eba0": "sys-kernel/gentoo-sources: Stable for Rem Priv Escal per policy\n\nThis version of kernel contains a fix for CVE-2026-80590.\n\nReports state that this exploitation results in privilege escalation and\nthe attack can be launched remotely.\n\nSigned-off-by: Mike Pagano <mpagano@gentoo.org>",
13+
"26ca536f282c8b391ca3988f075aa08bb1759d79": "sys-kernel/gentoo-sources: Stable for Rem Priv Escal per policy\n\nThis version of kernel contains a fix for CVE-2026-80590.\n\nReports state that this exploitation results in privilege escalation and\nthe attack can be launched remotely.\n\nSigned-off-by: Mike Pagano <mpagano@gentoo.org>",
14+
"d5a06410e6323ef3fdbaff13af5be46a9f3fcc26": "sys-kernel/gentoo-sources: Stabling for Rem Priv Escal per policy\n\nThis version of kernel contains a fix for CVE-2026-80590.\n\nReports state that this exploitation results in privilege escalation and\nthe attack can be launched remotely.\n\nSigned-off-by: Mike Pagano <mpagano@gentoo.org>"
15+
},
816
"CVE-2026-6368": {
917
"ec5590c3a311f75e54adbde3ecd77674bd8aacbf": "sys-libs/glibc: keyword 2.43-r4\n\nPatchset changelog:\nd389e22134 (HEAD -> gentoo/2.43, tag: gentoo/glibc-2.43-5, gentoo/gentoo/2.43) m68k: remove sysdeps/m68k/m680x0/fpu/w_fmod_compat.c (bug 34559)\n27d28f028b misc: Fix out-of-bounds array write in tdelete (bug 34506)\n1264f6fff4 malloc: Show hugetlb tunable default in --list-tunables\n28e32c5868 (tag: gentoo/glibc-2.43-4) m68k: Fix fmod/fmodf infinite recursion (BZ 34508)\ne1c0dce444 posix: Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors (BZ 34090, CVE-2026-6368)\n396394ef1d ppc64le: Restore optimized memchr for power10 [BZ #34300]\n89ac7b56a0 rtld: cache cpuid results on the stack for intel\na16c898eb3 posix: Fix stack overflow in wordexp tilde expansion (BZ 34091, CVE-2026-6791)\n8aa05acd3c resolv: Add test case tst-ns_sprintrr (bug 34033, bug 34069)\n74cf944899 resolv: Fix buffer overreads in ns_sprintrrf (CVE-2026-6238)\nb7b3dc3ca8 resolv: More types as unknown in ns_sprintrrf (CVE-2026-5435)\n6457b303eb resolv: Check for inet_ntop failure in ns_sprintrrf\n51d727ddb6 resolv: Improve formatting of unknown records in ns_sprintrrf\nbbe916c92a resolv: Fix ns_sprintrrf formatting of class, type values (bug 34289)\n352b94e1dd resolv: Declare __p_class_syms, __p_type_syms for internal use\n8c12fb8e36 hppa: Fix missing call to __feraiseexcept (BZ 34306)\n7da2d6fb29 arm: Save/restore VFP registers in PLT trampolines (BZ 34144, BZ 15792)\na72d6ca9d5 iconv: Suppress intermediate errors with //TRANSLIT (bug 34236)\n1b9a9ffe13 Hurd: restore some SIOC ioctls\n789ac0722f Hurd: comment ioctls which cannot currently compile\n7a5c2c8a7e Hurd: comment PF_ROUTE/AF_ROUTE defines\n87fb471baf Hurd: comment PF_LINK/AF_LINK defines\nafcf77d859 elf: don't clobber ld.so.conf in tst-glibc-hwcaps-prepend-cache [BZ #34210]\n1ece6a1eae Rename __unused fields to __glibc_reserved.\nccc888cecd math: Fix fma alignment when exponent difference is exactly 64 (BZ 34183)\n5616e5dde9 stdio-common: Fix buffer overflow in scanf %mc [BZ #34008]\n741bc4213e libio: Fix ungetwc operating on byte stream [BZ #33998]\n2b179153ea (tag: gentoo/glibc-2.43-3) abilist.awk: Handle weak unversioned defined symbols\nb8408369b8 Linux: Only define OPEN_TREE_* macros in <sys/mount.h> if undefined (bug 33921)\n1f41c59d32 include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h\ne0a7106a8d Use pending character state in IBM1390, IBM1399 character sets (CVE-2026-4046)\nb180ac98ab tests: fix tst-rseq with Linux 7.0\n971bff92c6 riscv: Resolve calls to memcpy using memcpy-generic in early startup\na254024c43 elf: Use dl-symbol-redir-ifunc.h instead _dl_strlen\n6622325eb8 elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso\ne89f91b763 (tag: gentoo/glibc-2.43-2) resolv: Check hostname for validity (CVE-2026-4438)\n19cf43a95c resolv: Count records correctly (CVE-2026-4437)\n102c0f14d6 posix: Run tst-wordexp-reuse-mem test\n035a3b754a hurd: enable ldconfig\nd249c8ba42 Add -lmachuser -lhurduser to libc.so on GNU/Hurd.\nd93a22d2c8 aarch64: Tests for locking GCS\nb745cf6dd2 aarch64: Lock GCS status at startup\n1bb8c9a05c tests: aarch64: fix makefile dependencies for dlopen tests for BTI\n522abb88a3 malloc: Avoid accessing /sys/kernel/mm files\nac1d318aa2 Add BZ 33904 entry to NEWS\nb2e0ebc3ba debug: Fix build with --enable-fortify-source=1 (BZ 33904)\neaa36e569a nss: Missing checks in __nss_configure_lookup, __nss_database_get (bug 28940)\n7d1e597476 Linux: In getlogin_r, use utmp fallback only for specific errors\nc19373bd72 nss: Introduce dedicated struct nss_database_for_fork type\n4e7a1009c7 Don't include <bits/openat2.h> directly (bug 33848)\nd9f7d850fd po: Incorporate translatins (nl updated, ar new)\nefbd0cfd3b Fix ldbl-128ibm ceill, floorl, roundl and truncl zero-sign handling\n52e48a32b5 (tag: gentoo/glibc-2.43-1) sparc: Fix argument passing to __libc_start_main on SPARC32\nb2c1e1f8ab Revert \"sparc: Fix sparc32 Fix argument passing to __libc_start_main (BZ 32981)\"\n621dad6de9 linux: Set internal DIR filepos as off64_t (BZ #23960, BZ #24050)\n3e65f71ea0 support: Add xreallocarray\n922ab844d8 linux: Use getdents64 on non-LFS readdir\ne0a6115f92 Force -O0 in conform tests to survive $CC changes\n97a0bd7d3f Adapt to Gentoo-specific /etc/mail/aliases\n8907b76b75 Disable ldconfig during install\n45b58d6bd1 NEWS: add new section 2.43.1\nf02515d8a6 Replace advisories directory with file ADVISORIES\n\nSigned-off-by: Andreas K. H\u00fcttel <dilfridge@gentoo.org>"
1018
},

data/fix-commits/imagemagick-b15feb65.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,12 @@
11
{
22
"vcs_url": "https://github.com/imagemagick/imagemagick",
33
"vulnerabilities": {
4+
"GHSA-3RJR-534C-8V67": {
5+
"282f455de5c80a7a0d1a713087db9c8fce344141": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67"
6+
},
7+
"GHSA-92RW-C5MW-27V4": {
8+
"c4b3c9039a1509e3e7869331773865b521a62f93": "Added missing null check to avoid a null pointer dereference (GHSA-92rw-c5mw-27v4)"
9+
},
410
"GHSA-89WQ-F8F6-2J2V": {
511
"d779ac52f92c3045ced59362b483bee25a3fc784": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-89wq-f8f6-2j2v"
612
},

data/fix-commits/imagemagick6-19533b67.json

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,9 @@
11
{
22
"vcs_url": "https://github.com/imagemagick/imagemagick6",
33
"vulnerabilities": {
4+
"GHSA-92RW-C5MW-27V4": {
5+
"3b124bb81d3c53ec7d2b46f5ea04c00c4b07b9b3": "Added missing null check to avoid a null pointer dereference (https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-92rw-c5mw-27v4)"
6+
},
47
"GHSA-89WQ-F8F6-2J2V": {
58
"4332e26659c849bf126aecb215482de1eed73308": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-89wq-f8f6-2j2v"
69
},

0 commit comments

Comments
 (0)