Data update for Mozilla::CA (briandfoy/cpan-security-advisory#161)

briandfoy · Aug 26, 2024 · 8c70c83 · 8c70c83
1 parent d3ed102
commit 8c70c83
Show file tree

Hide file tree

Showing 4 changed files with 47 additions and 19 deletions.
diff --git a/cpan-security-advisory b/cpan-security-advisory
diff --git a/lib/CPAN/Audit.pm b/lib/CPAN/Audit.pm
@@ -14,7 +14,7 @@ use CPAN::Audit::Version;
 use CPAN::Audit::Query;
 use CPAN::Audit::DB;
 
-our $VERSION = '20240824.003';
+our $VERSION = '20240826.002';
 
 sub new {
 	my( $class, %params ) = @_;

diff --git a/lib/CPAN/Audit/DB.pm b/lib/CPAN/Audit/DB.pm
@@ -1,5 +1,5 @@
-# created by util/generate at Sat Aug 24 00:29:27 2024
-# cpan-security-advisory a64317f9ff7e0fd1497e936a8bd8f9057ddb1ac7
+# created by util/generate at Mon Aug 26 01:28:48 2024
+# cpan-security-advisory d3ed1024fe83e5224882900d4ed8f73d63e89ad7
 #
 
 =encoding utf8
@@ -19,7 +19,7 @@ package CPAN::Audit::DB;
 use strict;
 use warnings;
 
-our $VERSION = '20240824.003';
+our $VERSION = '20240826.002';
 
 =over 4
 
@@ -12612,7 +12612,8 @@ sub db {
                                                                  'references' => [
                                                                                    'https://metacpan.org/changes/distribution/Cpanel-JSON-XS',
                                                                                    'https://github.com/rurban/Cpanel-JSON-XS/commit/6554531b39fac236321d8601d35eaaa75ae45e20'
-                                                                                 ]
+                                                                                 ],
+                                                                 'reported' => undef
                                                                },
                                                                {
                                                                  'affected_versions' => [
@@ -46775,6 +46776,29 @@ Resulting in a CWE-1188: Insecure Default Initialization of Resource weakness.
                                                                              ],
                                                              'reported' => undef,
                                                              'severity' => undef
+                                                           },
+                                                           {
+                                                             'affected_versions' => [
+                                                                                      '<20240730'
+                                                                                    ],
+                                                             'cves' => [
+                                                                         'CVE-2024-39689'
+                                                                       ],
+                                                             'description' => 'ECM GlobalTrust 2000 root certificates have been distrusted
+',
+                                                             'distribution' => 'Mozilla-CA',
+                                                             'fixed_versions' => [
+                                                                                   '>=20240730'
+                                                                                 ],
+                                                             'id' => 'CPANSA-Mozilla-CA-2024-39689',
+                                                             'references' => [
+                                                                               'https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/XpknYMPO8dI',
+                                                                               'https://groups.google.com/a/ccadb.org/g/public/c/wRs-zec8w7k/m/G_9QprJ2AQAJ',
+                                                                               'https://github.com/certifi/python-certifi/security/advisories/GHSA-248v-346w-9cwc',
+                                                                               'https://github.com/certifi/python-certifi/commit/bd8153872e9c6fc98f4023df9c2deaffea2fa463'
+                                                                             ],
+                                                             'reported' => '2024-06-11',
+                                                             'severity' => 'low'
                                                            }
                                                          ],
                                          'main_module' => 'Mozilla::CA',
@@ -53223,6 +53247,10 @@ Resulting in a CWE-1188: Insecure Default Initialization of Resource weakness.
                                                                    {
                                                                      'date' => '2018-10-08T23:21:03',
                                                                      'version' => '2.02'
+                                                                   },
+                                                                   {
+                                                                     'date' => '2024-08-24T18:13:26',
+                                                                     'version' => '2.03'
                                                                    }
                                                                  ]
                                                  },

diff --git a/lib/CPAN/Audit/DB.pm.gpg b/lib/CPAN/Audit/DB.pm.gpg
@@ -1,16 +1,16 @@
 -----BEGIN PGP SIGNATURE-----
 
-iQIzBAABCAAdFiEEdaq0LLoNfzfw1oht+D+NXoeLYEEFAmbJYacACgkQ+D+NXoeL
-YEFXoA/8DamYpJRYmkB2GsBCK2FDLJGlmiJgknPXFREEfiXb1xUg1eyWUqrMaxUd
-IbhC1V7RhKFxVBPVXw7tfdjjnRbyGbgqCiOJaVcj3yU+y28RhUFED6NHMkD5piup
-a2CGsmb4CdZEdIZIBGMDFupn8u9dhWJx+qXw7cKAZioyeFM9QIJFttaJOHj7+Y72
-rv8B9ci1HHzPSnH5bvVoBuKGJ/93zqHBrlCuzeuuTtOcfDmflyiQxtAGeSVxNbCV
-a4+Mg/oXJDoQe3kVqWJayuR4mkSvbtVb0WtyyQWe6uQ+ROt+xg42ydfyr8OMHScP
-38/2dK+bO2zUy/pR9p6XYI2aLd3GrkZ5l8QiN5ljZnVb9qyZKIdTDsHvf3hNhaZP
-Kv3vnffuXbt2LWo4CFFhhHdA8DP1o7gv7UjxNjwxF6IjWazuMO0aLwERXlW7ib7w
-1N3iPp7vRutf7V6rLCUHe3MZ+C+aPhbIHMakN6N9UDl+aFNULfAi+uQ6R5IPyFBx
-wLe1KxKb1EKiRmA9HpVHIgnR+e4CnTA11+s5OoHbO7eBStsuh8CNP5YOrNxcyPxI
-42DErj9EExuPa0CZkQm2oTD5g5bEWPt8nyMy6/1cyF2LbQh+kcb7t2s5Gya6tpRE
-Td5C2FUvAG0+nViBN8p4YEsYFHCMxRrnzTNq7WUfNRjT03Kx4OQ=
-=d3G2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+=o1vj
 -----END PGP SIGNATURE-----
+32 −0		.github/workflows/gpg_signatures.yml
+22 −21		.github/workflows/linux.yml
+5 −4		.github/workflows/macos.yml
+1 −1		.github/workflows/prove.yml
+13 −12		.github/workflows/release.yml
+10 −9		.github/workflows/windows.yml
+1 −0		cpan-security-advisory.json
+16 −0		cpan-security-advisory.json.gpg
+0 −1		cpansa/CPANSA-ActivePerl.yml
+1 −5		cpansa/CPANSA-Cpanel-JSON-XS.yml
+0 −24		cpansa/CPANSA-MT.yml
+23 −5		cpansa/CPANSA-Mozilla-CA.yml
+123 −13		lib/CPANSA/DB.pm
+13 −13		lib/CPANSA/DB.pm.gpg
+69 −40		util/generate