From a368f07827d95f79dd4bd50f0dc45e974c47d4a3 Mon Sep 17 00:00:00 2001 From: Hiroki Tagato Date: Mon, 20 Jan 2025 22:39:38 +0900 Subject: [PATCH] security/vuxml: document electron31 multiple vulnerabilities Obtained from: https://github.com/electron/electron/releases/tag/v31.7.7 --- security/vuxml/vuln/2025.xml | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml index b0bd5bc83730..001cbc84d4d5 100644 --- a/security/vuxml/vuln/2025.xml +++ b/security/vuxml/vuln/2025.xml @@ -1,3 +1,38 @@ + + electron31 -- multiple vulnerabilities + + + electron31 + 31.7.7 + + + + +

Electron developers report:

+
+

This update fixes the following vulnerabilities:

+
    +
  • Security: backported fix for CVE-2024-12053.
    • +
  • Security: backported fix for CVE-2024-12693.
    • +
  • Security: backported fix for CVE-2024-12694.
    • +
+
+ + + + CVE-2024-12053 + https://github.com/advisories/GHSA-wvx7-72hc-rp32 + CVE-2024-12693 + https://github.com/advisories/GHSA-m84q-p89f-6cc5 + CVE-2024-12694 + https://github.com/advisories/GHSA-cgc6-4xgf-5q5x + + + 2025-01-14 + 2025-01-20 + + + age -- age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution