Skip to content

Add motionEye config mode fix references#8420

Open
cookesan wants to merge 1 commit into
github:cookesan/advisory-improvement-8420from
cookesan:motioneye-rhgp-release-references
Open

Add motionEye config mode fix references#8420
cookesan wants to merge 1 commit into
github:cookesan/advisory-improvement-8420from
cookesan:motioneye-rhgp-release-references

Conversation

@cookesan

@cookesan cookesan commented Jun 30, 2026

Copy link
Copy Markdown

Adds motionEye config mode fix references to GHSA-rhgp-6wq6-9j67.

Audit refresh, July 8, 2026:

  • Confirmed the live PR is open, ready for review, merge-clean, and the visible advisory check is green.
  • Rechecked the merge-base diff: exactly one advisory JSON file changes (advisories/github-reviewed/2026/06/GHSA-rhgp-6wq6-9j67/GHSA-rhgp-6wq6-9j67.json), JSON parses, git diff --check passes, and the exact-head worktree is clean.
  • Revalidated the added public references and package-version evidence in the diff; all resolve through their source site or registry.

@github-actions github-actions Bot changed the base branch from main to cookesan/advisory-improvement-8420 June 30, 2026 10:52
@cookesan cookesan force-pushed the motioneye-rhgp-release-references branch from af3a703 to f110f52 Compare June 30, 2026 10:54
@cookesan cookesan changed the title Add motionEye config mode fixed release references Add motionEye config mode fix references Jun 30, 2026
@cookesan

cookesan commented Jul 7, 2026

Copy link
Copy Markdown
Author

Review note: this expands GHSA-rhgp-6wq6-9j67 with the two merged upstream motionEye config-permission fixes plus the 0.44.0 fixed release/package evidence. I checked that motioneye-project/motioneye#3311 and #3316 are merged, the release URL resolves, PyPI has motioneye==0.44.0, and the PR head JSON validates against the OSV schema; the affected range, CVSS score, alias, and package metadata stay unchanged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant