Latest data: Thu Jan 18 08:04:45 UTC 2024

Homebrew · Jan 18, 2024 · 54a7f15 · 54a7f15
1 parent cb675c4
commit 54a7f15
Show file tree

Hide file tree

Showing 64 changed files with 734 additions and 77 deletions.
diff --git a/audits/alot-requirements.audit.json b/audits/alot-requirements.audit.json
@@ -5,6 +5,9 @@
       "version": "5.0.8",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "alot-requirements"
+    ],
     "vulnerabilities": [
       {
         "modified": "2023-11-08T04:11:58Z",
@@ -126,6 +129,9 @@
       "version": "23.8.0",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "alot-requirements"
+    ],
     "vulnerabilities": [
       {
         "modified": "2023-11-08T04:13:41Z",

diff --git a/audits/animdl-requirements.audit.json b/audits/animdl-requirements.audit.json
@@ -5,14 +5,18 @@
       "version": "3.14.1",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "animdl-requirements"
+    ],
     "vulnerabilities": [
       {
-        "modified": "2024-01-05T17:42:16Z",
+        "modified": "2024-01-17T11:41:25Z",
         "published": "2024-01-05T06:30:19Z",
         "schema_version": "1.6.0",
         "id": "GHSA-j225-cvw7-qrx7",
         "aliases": [
-          "CVE-2023-52323"
+          "CVE-2023-52323",
+          "PYSEC-2024-3"
         ],
         "summary": "PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption",
         "details": "PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.",
@@ -204,16 +208,118 @@
           "nvd_published_at": "2024-01-05T04:15:07Z",
           "severity": "MODERATE"
         }
+      },
+      {
+        "modified": "2024-01-17T11:41:25Z",
+        "published": "2024-01-05T04:15:00Z",
+        "schema_version": "1.6.0",
+        "id": "PYSEC-2024-3",
+        "aliases": [
+          "CVE-2023-52323",
+          "GHSA-j225-cvw7-qrx7"
+        ],
+        "details": "PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.",
+        "affected": [
+          {
+            "package": {
+              "ecosystem": "PyPI",
+              "name": "pycryptodomex",
+              "purl": "pkg:pypi/pycryptodomex"
+            },
+            "ranges": [
+              {
+                "type": "ECOSYSTEM",
+                "events": [
+                  {
+                    "introduced": "0"
+                  },
+                  {
+                    "fixed": "3.19.1"
+                  }
+                ]
+              }
+            ],
+            "versions": [
+              "3.10.1",
+              "3.10.3",
+              "3.10.4",
+              "3.11.0",
+              "3.12.0",
+              "3.13.0",
+              "3.14.0",
+              "3.14.1",
+              "3.15.0",
+              "3.16.0",
+              "3.17",
+              "3.18.0",
+              "3.19.0",
+              "3.4.1",
+              "3.4.11",
+              "3.4.12",
+              "3.4.2",
+              "3.4.3",
+              "3.4.5",
+              "3.4.6",
+              "3.4.7",
+              "3.4.8",
+              "3.4.9",
+              "3.5.1",
+              "3.6.0",
+              "3.6.1",
+              "3.6.3",
+              "3.6.4",
+              "3.6.5",
+              "3.6.6",
+              "3.7.0",
+              "3.7.1",
+              "3.7.2",
+              "3.7.3",
+              "3.8.0",
+              "3.8.1",
+              "3.8.2",
+              "3.9.0",
+              "3.9.1",
+              "3.9.2",
+              "3.9.3",
+              "3.9.4",
+              "3.9.6",
+              "3.9.7",
+              "3.9.8",
+              "3.9.9"
+            ],
+            "database_specific": {
+              "source": "https://github.com/pypa/advisory-database/blob/main/vulns/pycryptodomex/PYSEC-2024-3.yaml"
+            }
+          }
+        ],
+        "severity": [
+          {
+            "type": "CVSS_V3",
+            "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
+          }
+        ],
+        "references": [
+          {
+            "type": "WEB",
+            "url": "https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst"
+          },
+          {
+            "type": "PACKAGE",
+            "url": "https://pypi.org/project/pycryptodomex/#history"
+          }
+        ]
       }
     ],
     "groups": [
       {
         "ids": [
-          "GHSA-j225-cvw7-qrx7"
+          "GHSA-j225-cvw7-qrx7",
+          "PYSEC-2024-3"
         ],
         "aliases": [
           "CVE-2023-52323",
-          "GHSA-j225-cvw7-qrx7"
+          "GHSA-j225-cvw7-qrx7",
+          "PYSEC-2024-3"
         ]
       }
     ]

diff --git a/audits/ansible-requirements.audit.json b/audits/ansible-requirements.audit.json
@@ -5,6 +5,9 @@
       "version": "1.3.1",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "ansible-requirements"
+    ],
     "vulnerabilities": [
       {
         "modified": "2023-11-08T03:57:53Z",
@@ -92,6 +95,9 @@
       "version": "3.3.1",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "ansible-requirements"
+    ],
     "vulnerabilities": [
       {
         "modified": "2024-01-11T15:46:16Z",

diff --git a/audits/athenacli-requirements.audit.json b/audits/athenacli-requirements.audit.json
@@ -5,6 +5,9 @@
       "version": "5.0.8",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "athenacli-requirements"
+    ],
     "vulnerabilities": [
       {
         "modified": "2023-11-08T04:11:58Z",

diff --git a/audits/aws-shell-requirements.audit.json b/audits/aws-shell-requirements.audit.json
@@ -5,6 +5,9 @@
       "version": "5.0.8",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "aws-shell-requirements"
+    ],
     "vulnerabilities": [
       {
         "modified": "2023-11-08T04:11:58Z",

diff --git a/audits/awscli-requirements.audit.json b/audits/awscli-requirements.audit.json
@@ -5,6 +5,9 @@
       "version": "40.0.1",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "awscli-requirements"
+    ],
     "vulnerabilities": [
       {
         "modified": "2023-11-09T05:40:01Z",

diff --git a/audits/bbot-requirements.audit.json b/audits/bbot-requirements.audit.json
@@ -5,6 +5,9 @@
       "version": "7.7.0",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "bbot-requirements"
+    ],
     "vulnerabilities": [
       {
         "modified": "2024-01-02T15:28:50Z",
@@ -448,6 +451,9 @@
       "version": "2.14.11",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "bbot-requirements"
+    ],
     "vulnerabilities": [
       {
         "modified": "2023-12-20T20:57:57Z",
@@ -954,6 +960,9 @@
       "version": "3.1.2",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "bbot-requirements"
+    ],
     "vulnerabilities": [
       {
         "modified": "2024-01-11T15:41:33Z",
@@ -1097,14 +1106,18 @@
       "version": "3.19.0",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "bbot-requirements"
+    ],
     "vulnerabilities": [
       {
-        "modified": "2024-01-05T17:42:16Z",
+        "modified": "2024-01-17T11:41:25Z",
         "published": "2024-01-05T06:30:19Z",
         "schema_version": "1.6.0",
         "id": "GHSA-j225-cvw7-qrx7",
         "aliases": [
-          "CVE-2023-52323"
+          "CVE-2023-52323",
+          "PYSEC-2024-3"
         ],
         "summary": "PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption",
         "details": "PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.",
@@ -1305,7 +1318,8 @@
         ],
         "aliases": [
           "CVE-2023-52323",
-          "GHSA-j225-cvw7-qrx7"
+          "GHSA-j225-cvw7-qrx7",
+          "PYSEC-2024-3"
         ]
       }
     ]

diff --git a/audits/breezy-requirements.audit.json b/audits/breezy-requirements.audit.json
@@ -5,6 +5,9 @@
       "version": "5.0.8",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "breezy-requirements"
+    ],
     "vulnerabilities": [
       {
         "modified": "2023-11-08T04:11:58Z",

diff --git a/audits/buku-requirements.audit.json b/audits/buku-requirements.audit.json
@@ -5,6 +5,9 @@
       "version": "2.3.6",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "buku-requirements"
+    ],
     "vulnerabilities": [
       {
         "modified": "2023-11-24T09:49:21Z",

diff --git a/audits/bzt-requirements.audit.json b/audits/bzt-requirements.audit.json
@@ -5,6 +5,9 @@
       "version": "1.26.16",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "bzt-requirements"
+    ],
     "vulnerabilities": [
       {
         "modified": "2023-11-08T04:13:39Z",

diff --git a/audits/certbot-requirements.audit.json b/audits/certbot-requirements.audit.json
@@ -5,6 +5,9 @@
       "version": "5.0.8",
       "ecosystem": "PyPI"
     },
+    "dependency_groups": [
+      "certbot-requirements"
+    ],
     "vulnerabilities": [
       {
         "modified": "2023-11-08T04:11:58Z",