Attachment 269654 Details for Bug 293829 – 0001-security-vuxml-Add-go-ethereum-vulnerabilities.patch

[patch] 0001-security-vuxml-Add-go-ethereum-vulnerabilities.patch

0001-security-vuxml-Add-go-ethereum-vulnerabilities.patch (text/plain), 1.91 KB, created by Yusuf Yaman on 2026-04-12 07:53:53 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Yusuf Yaman

Created: 2026-04-12 07:53:53 UTC

Size: 1.91 KB

patch

obsolete

>From 29403edaaadae160119d21e418a294b6944dda87 Mon Sep 17 00:00:00 2001
>From: Yusuf Yaman <nxjoseph@FreeBSD.org>
>Date: Sun, 12 Apr 2026 10:53:05 +0300
>Subject: [PATCH] security/vuxml: Add go-ethereum vulnerabilities
>
>PR:	293829
>---
> security/vuxml/vuln/2026.xml | 34 ++++++++++++++++++++++++++++++++++
> 1 file changed, 34 insertions(+)
>
>diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml
>index f115b3c9d66a..3fe9dc6094fc 100644
>--- a/security/vuxml/vuln/2026.xml
>+++ b/security/vuxml/vuln/2026.xml
>@@ -1,3 +1,37 @@
>+  <vuln vid="9c8c00ce-3642-11f1-bd03-3c7c3fba4204">
>+    <topic>go-ethereum -- vulnerabilities</topic>
>+    <affects>
>+    <package>
>+	<name>go-ethereum</name>
>+	<range><lt>1.17.0</lt></range>
>+    </package>
>+    </affects>
>+    <description>
>+	<body xmlns="http://www.w3.org/1999/xhtml">
>+	<p>https://github.com/ethereum/go-ethereum/security/advisories reports:</p>
>+	<blockquote cite="https://github.com/ethereum/go-ethereum/security/advisories">
>+	  <ul>
>+	    <li>DoS via malicious p2p message (CVE-2026-26313)</li>
>+	    <li>DoS via malicious p2p message (CVE-2026-26314)</li>
>+	    <li>Improper ECIES Public Key Validation in RLPx Handshake (CVE-2026-26315)</li>
>+	  </ul>
>+	</blockquote>
>+	</body>
>+    </description>
>+    <references>
>+      <cvename>CVE-2026-26313</cvename>
>+      <url>https://github.com/ethereum/go-ethereum/security/advisories/GHSA-689v-6xwf-5jf3</url>
>+      <cvename>CVE-2026-26314</cvename>
>+      <url>https://github.com/ethereum/go-ethereum/security/advisories/GHSA-2gjw-fg97-vg3r</url>
>+      <cvename>CVE-2026-26315</cvename>
>+      <url>https://github.com/ethereum/go-ethereum/security/advisories/GHSA-m6j8-rg6r-7mv8</url>
>+    </references>
>+    <dates>
>+      <discovery>2026-02-17</discovery>
>+      <entry>2026-04-12</entry>
>+    </dates>
>+  </vuln>
>+
>   <vuln vid="8d549898-3598-11f1-a8bc-3c7c3fba4204">
>     <topic>py-ormar -- vulnerabilities</topic>
>     <affects>
>-- 
>2.53.0
>

Actions: View | Diff

Attachments on bug 293829: 268817 | 269641 | 269653 | 269654 | 269665 | 269719