git: c556b8a8d5e6 - main - security/vuxml: document electron22 multiple vulnerabilities
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 14 Jul 2023 07:05:36 UTC
The branch main has been updated by tagattie:
URL: https://cgit.FreeBSD.org/ports/commit/?id=c556b8a8d5e63d0aa4421979a12508677618df6a
commit c556b8a8d5e63d0aa4421979a12508677618df6a
Author: Hiroki Tagato <tagattie@FreeBSD.org>
AuthorDate: 2023-07-14 07:02:49 +0000
Commit: Hiroki Tagato <tagattie@FreeBSD.org>
CommitDate: 2023-07-14 07:05:30 +0000
security/vuxml: document electron22 multiple vulnerabilities
Obtained from: https://github.com/electron/electron/releases/tag/v22.3.17
---
security/vuxml/vuln/2023.xml | 35 +++++++++++++++++++++++++++++++++++
1 file changed, 35 insertions(+)
diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml
index c11d44506b66..01fe1392e4ca 100644
--- a/security/vuxml/vuln/2023.xml
+++ b/security/vuxml/vuln/2023.xml
@@ -1,3 +1,38 @@
+ <vuln vid="3446e45d-a51b-486f-9b0e-e4402d91fed6">
+ <topic>electron22 -- multiple vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>electron22</name>
+ <range><lt>22.3.17</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Electron developers report:</p>
+ <blockquote cite="https://github.com/electron/electron/releases/tag/v22.3.17">
+ <p>This update fixes the following vulnerabilities:</p>
+ <ul>
+ <li>Security: backported fix for CVE-2023-3422.</li>
+ <li>Security: backported fix for CVE-2023-3421.</li>
+ <li>Security: backported fix for CVE-2023-3420.</li>
+ </ul>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2023-3422</cvename>
+ <url>https://github.com/advisories/GHSA-gqjh-f545-vcx3</url>
+ <cvename>CVE-2023-3421</cvename>
+ <url>https://github.com/advisories/GHSA-943x-93ff-jr62</url>
+ <cvename>CVE-2023-3420</cvename>
+ <url>https://github.com/advisories/GHSA-4297-fx5c-x987</url>
+ </references>
+ <dates>
+ <discovery>2023-07-12</discovery>
+ <entry>2023-07-14</entry>
+ </dates>
+ </vuln>
+
<vuln vid="b67d768c-1f53-11ee-82ed-4ccc6adda413">
<topic>librecad -- out-of-bounds read in importshp plugin</topic>
<affects>