Skip to content

Commit d4a8cfb

Browse files
aboutcode-automationaboutcode-automation
committed
Sync Collecting Fix Commits: Sun Aug 9 17:11:19 UTC 2026
Signed-off-by: AboutCode Automation <automation@aboutcode.org>
1 parent df77a89 commit d4a8cfb

2 files changed

Lines changed: 70 additions & 3 deletions

File tree

‎data/fix-commits/advisory-database-b78f1d41.json‎

Lines changed: 61 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,67 @@
11
{
22
"vcs_url": "https://github.com/github/advisory-database",
33
"vulnerabilities": {
4+
"GHSA-7553-W66V-FVHR": {
5+
"7cd2747e792926e885a099daae94a11429b02b53": "Publish Advisories\n\nGHSA-7553-w66v-fvhr\nGHSA-88g6-3r36-3589\nGHSA-mgf9-vmjp-7q9v\nGHSA-mr8h-hjph-4g54\nGHSA-qg5x-jc32-6g34\nGHSA-rq3v-mj3j-qv4c"
6+
},
7+
"GHSA-88G6-3R36-3589": {
8+
"7cd2747e792926e885a099daae94a11429b02b53": "Publish Advisories\n\nGHSA-7553-w66v-fvhr\nGHSA-88g6-3r36-3589\nGHSA-mgf9-vmjp-7q9v\nGHSA-mr8h-hjph-4g54\nGHSA-qg5x-jc32-6g34\nGHSA-rq3v-mj3j-qv4c"
9+
},
10+
"GHSA-MGF9-VMJP-7Q9V": {
11+
"7cd2747e792926e885a099daae94a11429b02b53": "Publish Advisories\n\nGHSA-7553-w66v-fvhr\nGHSA-88g6-3r36-3589\nGHSA-mgf9-vmjp-7q9v\nGHSA-mr8h-hjph-4g54\nGHSA-qg5x-jc32-6g34\nGHSA-rq3v-mj3j-qv4c"
12+
},
13+
"GHSA-MR8H-HJPH-4G54": {
14+
"7cd2747e792926e885a099daae94a11429b02b53": "Publish Advisories\n\nGHSA-7553-w66v-fvhr\nGHSA-88g6-3r36-3589\nGHSA-mgf9-vmjp-7q9v\nGHSA-mr8h-hjph-4g54\nGHSA-qg5x-jc32-6g34\nGHSA-rq3v-mj3j-qv4c"
15+
},
16+
"GHSA-QG5X-JC32-6G34": {
17+
"7cd2747e792926e885a099daae94a11429b02b53": "Publish Advisories\n\nGHSA-7553-w66v-fvhr\nGHSA-88g6-3r36-3589\nGHSA-mgf9-vmjp-7q9v\nGHSA-mr8h-hjph-4g54\nGHSA-qg5x-jc32-6g34\nGHSA-rq3v-mj3j-qv4c"
18+
},
19+
"GHSA-RQ3V-MJ3J-QV4C": {
20+
"7cd2747e792926e885a099daae94a11429b02b53": "Publish Advisories\n\nGHSA-7553-w66v-fvhr\nGHSA-88g6-3r36-3589\nGHSA-mgf9-vmjp-7q9v\nGHSA-mr8h-hjph-4g54\nGHSA-qg5x-jc32-6g34\nGHSA-rq3v-mj3j-qv4c"
21+
},
22+
"GHSA-2V88-CQF4-Q6J4": {
23+
"9fdd12ab26ea20ef0f84e0e05962570f9a42cba3": "Publish Advisories\n\nGHSA-2v88-cqf4-q6j4\nGHSA-5x4f-6m9q-mg75\nGHSA-67pw-8gc7-9qq9\nGHSA-9hgm-6p57-h656\nGHSA-cfh9-rj2q-vjwm\nGHSA-v3hx-vw4q-qf5q\nGHSA-wvcv-8mp3-7638"
24+
},
25+
"GHSA-5X4F-6M9Q-MG75": {
26+
"9fdd12ab26ea20ef0f84e0e05962570f9a42cba3": "Publish Advisories\n\nGHSA-2v88-cqf4-q6j4\nGHSA-5x4f-6m9q-mg75\nGHSA-67pw-8gc7-9qq9\nGHSA-9hgm-6p57-h656\nGHSA-cfh9-rj2q-vjwm\nGHSA-v3hx-vw4q-qf5q\nGHSA-wvcv-8mp3-7638"
27+
},
28+
"GHSA-67PW-8GC7-9QQ9": {
29+
"9fdd12ab26ea20ef0f84e0e05962570f9a42cba3": "Publish Advisories\n\nGHSA-2v88-cqf4-q6j4\nGHSA-5x4f-6m9q-mg75\nGHSA-67pw-8gc7-9qq9\nGHSA-9hgm-6p57-h656\nGHSA-cfh9-rj2q-vjwm\nGHSA-v3hx-vw4q-qf5q\nGHSA-wvcv-8mp3-7638"
30+
},
31+
"GHSA-9HGM-6P57-H656": {
32+
"9fdd12ab26ea20ef0f84e0e05962570f9a42cba3": "Publish Advisories\n\nGHSA-2v88-cqf4-q6j4\nGHSA-5x4f-6m9q-mg75\nGHSA-67pw-8gc7-9qq9\nGHSA-9hgm-6p57-h656\nGHSA-cfh9-rj2q-vjwm\nGHSA-v3hx-vw4q-qf5q\nGHSA-wvcv-8mp3-7638"
33+
},
34+
"GHSA-CFH9-RJ2Q-VJWM": {
35+
"9fdd12ab26ea20ef0f84e0e05962570f9a42cba3": "Publish Advisories\n\nGHSA-2v88-cqf4-q6j4\nGHSA-5x4f-6m9q-mg75\nGHSA-67pw-8gc7-9qq9\nGHSA-9hgm-6p57-h656\nGHSA-cfh9-rj2q-vjwm\nGHSA-v3hx-vw4q-qf5q\nGHSA-wvcv-8mp3-7638"
36+
},
37+
"GHSA-V3HX-VW4Q-QF5Q": {
38+
"9fdd12ab26ea20ef0f84e0e05962570f9a42cba3": "Publish Advisories\n\nGHSA-2v88-cqf4-q6j4\nGHSA-5x4f-6m9q-mg75\nGHSA-67pw-8gc7-9qq9\nGHSA-9hgm-6p57-h656\nGHSA-cfh9-rj2q-vjwm\nGHSA-v3hx-vw4q-qf5q\nGHSA-wvcv-8mp3-7638"
39+
},
40+
"GHSA-WVCV-8MP3-7638": {
41+
"9fdd12ab26ea20ef0f84e0e05962570f9a42cba3": "Publish Advisories\n\nGHSA-2v88-cqf4-q6j4\nGHSA-5x4f-6m9q-mg75\nGHSA-67pw-8gc7-9qq9\nGHSA-9hgm-6p57-h656\nGHSA-cfh9-rj2q-vjwm\nGHSA-v3hx-vw4q-qf5q\nGHSA-wvcv-8mp3-7638"
42+
},
43+
"GHSA-6H24-VMWH-X75R": {
44+
"71ca7b6916b1fb164168b4bb6050d2676e5a8d6a": "Publish Advisories\n\nGHSA-6h24-vmwh-x75r\nGHSA-cw8q-38rc-x37p\nGHSA-jgm8-jqmm-5rc5\nGHSA-mjp7-537m-x465\nGHSA-q9qj-38cq-3792\nGHSA-qp9j-gfjj-6h3v"
45+
},
46+
"GHSA-CW8Q-38RC-X37P": {
47+
"71ca7b6916b1fb164168b4bb6050d2676e5a8d6a": "Publish Advisories\n\nGHSA-6h24-vmwh-x75r\nGHSA-cw8q-38rc-x37p\nGHSA-jgm8-jqmm-5rc5\nGHSA-mjp7-537m-x465\nGHSA-q9qj-38cq-3792\nGHSA-qp9j-gfjj-6h3v"
48+
},
49+
"GHSA-JGM8-JQMM-5RC5": {
50+
"71ca7b6916b1fb164168b4bb6050d2676e5a8d6a": "Publish Advisories\n\nGHSA-6h24-vmwh-x75r\nGHSA-cw8q-38rc-x37p\nGHSA-jgm8-jqmm-5rc5\nGHSA-mjp7-537m-x465\nGHSA-q9qj-38cq-3792\nGHSA-qp9j-gfjj-6h3v"
51+
},
52+
"GHSA-MJP7-537M-X465": {
53+
"71ca7b6916b1fb164168b4bb6050d2676e5a8d6a": "Publish Advisories\n\nGHSA-6h24-vmwh-x75r\nGHSA-cw8q-38rc-x37p\nGHSA-jgm8-jqmm-5rc5\nGHSA-mjp7-537m-x465\nGHSA-q9qj-38cq-3792\nGHSA-qp9j-gfjj-6h3v"
54+
},
55+
"GHSA-Q9QJ-38CQ-3792": {
56+
"71ca7b6916b1fb164168b4bb6050d2676e5a8d6a": "Publish Advisories\n\nGHSA-6h24-vmwh-x75r\nGHSA-cw8q-38rc-x37p\nGHSA-jgm8-jqmm-5rc5\nGHSA-mjp7-537m-x465\nGHSA-q9qj-38cq-3792\nGHSA-qp9j-gfjj-6h3v"
57+
},
58+
"GHSA-QP9J-GFJJ-6H3V": {
59+
"71ca7b6916b1fb164168b4bb6050d2676e5a8d6a": "Publish Advisories\n\nGHSA-6h24-vmwh-x75r\nGHSA-cw8q-38rc-x37p\nGHSA-jgm8-jqmm-5rc5\nGHSA-mjp7-537m-x465\nGHSA-q9qj-38cq-3792\nGHSA-qp9j-gfjj-6h3v"
60+
},
61+
"GHSA-M4CH-4M5F-2GP6": {
62+
"9868978a0ff7b913a765b7233e0de28f50183909": "Improve GHSA-m4ch-4m5f-2gp6",
63+
"dc1b3d6a40bc9ab33fe48e0653d2696832234561": "Publish Advisories\n\nGHSA-3fx3-85r4-8j3w\nGHSA-c3hf-8vgx-72rh\nGHSA-m4ch-4m5f-2gp6"
64+
},
465
"GHSA-3R2R-P86C-VJ94": {
566
"1d5bf4bda40279a1c09577407a237e02bf6f8bbf": "Publish Advisories\n\nGHSA-3r2r-p86c-vj94\nGHSA-46jg-c454-8hm3\nGHSA-866p-rrc7-6r5x\nGHSA-h64x-hp84-8636\nGHSA-rhch-h3c6-w784\nGHSA-rm8c-j3vq-fv9j"
667
},
@@ -202665,9 +202726,6 @@
202665202726
"bf4e0c09e4c86dd298ad376b9dd70fc8a3dfc5bd": "Publish GHSA-8pp6-5qpw-85g3",
202666202727
"7ed50a881669811b34ed2810290bec28adbc9acf": "Publish Advisories\n\nGHSA-q2h2-9xqm-xcc7\nGHSA-r26p-gh73-qgq9\nGHSA-8pp6-5qpw-85g3\nGHSA-cw65-q26q-33p4"
202667202728
},
202668-
"GHSA-M4CH-4M5F-2GP6": {
202669-
"dc1b3d6a40bc9ab33fe48e0653d2696832234561": "Publish Advisories\n\nGHSA-3fx3-85r4-8j3w\nGHSA-c3hf-8vgx-72rh\nGHSA-m4ch-4m5f-2gp6"
202670-
},
202671202729
"GHSA-XVRC-2WVH-49VC": {
202672202730
"297a804533004c94e94f9c09916d10cce902ee13": "Publish GHSA-xvrc-2wvh-49vc"
202673202731
},

‎data/fix-commits/buildroot-0b809119.json‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,15 @@
11
{
22
"vcs_url": "https://github.com/buildroot/buildroot",
33
"vulnerabilities": {
4+
"CVE-2026-39879": {
5+
"732a933e348440dee758c6fe90b384c8e3f7b052": "package/syslog-ng: security bump version to 4.12.0\n\nhttps://github.com/syslog-ng/syslog-ng/blob/syslog-ng-4.12.0/NEWS.md\n\nFixes CVE-2026-39879.\n\nSigned-off-by: Bernd Kuhls <bernd@kuhls.net>\nSigned-off-by: Julien Olivain <ju.o@free.fr>"
6+
},
7+
"CVE-2026-70368": {
8+
"8b6eea299b3e519a6dac908e5ceed49cc43c4698": "package/stunnel: security bump to 5.80\n\nFixes following CVE's:\n\nCVE-2026-70368: Fixed an out-of-bounds memory\naccess triggered by logging attacker-controlled protocol messages longer\nthan 1,024 bytes (thanks to AISLE Research and Clemens Lang).\n\nCVE-2026-70367: Fixed a SOCKS server mode bypass of the localhost\ndestination filter using alternate local-address encodings and\ninterface-scoped IPv6 destinations (thanks to AISLE Research and Clemens\nLang).\n\nComplete Changelog is here:\nhttps://www.stunnel.org/NEWS.html\n\nSigned-off-by: Waldemar Brodkorb <wbx@openadk.org>\nSigned-off-by: Julien Olivain <ju.o@free.fr>"
9+
},
10+
"CVE-2026-70367": {
11+
"8b6eea299b3e519a6dac908e5ceed49cc43c4698": "package/stunnel: security bump to 5.80\n\nFixes following CVE's:\n\nCVE-2026-70368: Fixed an out-of-bounds memory\naccess triggered by logging attacker-controlled protocol messages longer\nthan 1,024 bytes (thanks to AISLE Research and Clemens Lang).\n\nCVE-2026-70367: Fixed a SOCKS server mode bypass of the localhost\ndestination filter using alternate local-address encodings and\ninterface-scoped IPv6 destinations (thanks to AISLE Research and Clemens\nLang).\n\nComplete Changelog is here:\nhttps://www.stunnel.org/NEWS.html\n\nSigned-off-by: Waldemar Brodkorb <wbx@openadk.org>\nSigned-off-by: Julien Olivain <ju.o@free.fr>"
12+
},
413
"CVE-2026-34580": {
514
"402c94c2d70d617783a2cd9bb2c90556008b79ba": "package/botan: security bump to version 3.11.1\n\n- Update BOTAN_VERSION to 3.11.1\n- Remove 0001-Add-more-value-barriers-to-avoid-compiler-induced-side-channels.patch\n as it is already integrated upstream in this version.\n\nFixed in 3.11.1:\n- CVE-2026-34580: Resolve certificate verification bypass bug introduced\n in 3.11.0 (GH #5500)\n- CVE-2026-34582: Resolve TLS 1.3 client authentication bypass (GH #5599)\n\nFixed in 3.11.0:\n- CVE-2026-32877: Fix a heap over-read during SM2 decryption (GH #5450)\n- CVE-2026-32883: Fix an OCSP response forgery vulnerability (GH #5449)\n- CVE-2026-32884: Fix a name constraints bypass for DNS names (GH #5448)\n\n- Remove the --disable-altivec configuration option as it has been removed\n from the Botan build system in version 3.x\n- Optimize the --disable-neon logic using the yx pattern.\n In Botan 3.x, the --disable-neon flag is specifically targeted at the\n arm32 architecture. Furthermore, Buildroot's BR2_ARM_CPU_HAS_NEON\n variable is only defined for 32-bit ARM, which previously caused a\n false-positive --disable-neon flag to be passed on AArch64 builds\n- Update license.txt hash in botan.hash due to the copyright year update\n to 2026\n\nhttps://botan.randombit.net/news.html#version-3-11-1-2026-03-31\n\nSigned-off-by: Shubham Chakraborty <chakrabortyshubham66@gmail.com>\n[Julien: fix CVE numbers in commit log]\nSigned-off-by: Julien Olivain <ju.o@free.fr>"
615
},

0 commit comments

Comments
 (0)