Граф коммитов

9 Коммитов

Автор SHA1 Сообщение Дата
Tatiana Bradley 37c5cbee19 data/reports: update 4 reports
Remove/fix non-existent packages.

  - data/reports/GO-2021-0064.yaml
  - data/reports/GO-2021-0065.yaml
  - data/reports/GO-2024-0701.yaml
  - data/reports/GO-2024-2912.yaml

Updates golang/vulndb#64
Updates golang/vulndb#65
Updates golang/vulndb#701
Updates golang/vulndb#2912

Change-Id: Id36b6a47f75c4afb79318d0c3b9ff3b62c5be601
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/599177
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Damien Neil <dneil@google.com>
2024-07-19 16:04:58 +00:00
Tatiana Bradley 69d9a200a8 data: apply REVIEWED status to all existing reports and osv
Change-Id: I862c5bb24b9c08c29f0d437fd1be61da0319ef0d
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/585517
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Damien Neil <dneil@google.com>
2024-05-20 16:03:47 +00:00
Tatiana Bradley 4d4a361097 internal/{osv,report}, data: publish summaries to OSV
Modify ToOSV to publish the summary from the YAML report to OSV, and
apply this change to each existing OSV report.

For golang/go#56443

Change-Id: Iee78fe75f42fe9a52c6e4023ee9ad8dfa5feba8d
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/501203
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
2023-06-12 18:45:41 +00:00
Tatiana Bradley 264b406b71 internal/osv, all: move DatabaseSpecific osv field
Moves DatabaseSpecific to be a field of the top-level osv.Entry, instead
of a subfield of the Affected field.

Change-Id: I8c80f8af268b51d57833268b89947838c53e407a
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/481136
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Julie Qiu <julieqiu@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-04-03 15:57:51 +00:00
Tatiana Bradley 2fcfeff930 data/reports: add missing GHSAs
These GHSAs were found by a modification of the behavior of vulnreport
fix.

Change-Id: I72415e876d84d30f81896108421d5bf998018c4f
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/466576
Reviewed-by: Tim King <taking@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
2023-02-08 18:46:18 +00:00
Tatiana Bradley a609ca0adf data/reports: add vulnerable_at to GO-2021-0065.yaml
Aliases: CVE-2019-11250

Updates golang/vulndb#65

Change-Id: I0b3b58acec9cce8ab298d9be9f1982757e7f8d3b
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/462617
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Auto-Submit: Tatiana Bradley <tatiana@golang.org>
Run-TryBot: Tatiana Bradley <tatiana@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
2023-01-18 21:23:44 +00:00
Maceo Thompson 93f50fcb7c internal/report, data/osv: populate schema_version field in osv entries
The vulnreport osv command now populates all generated osvs with the current schema version (1.3.1).
This CL also updates all previous OSV entries to also have the current schema version.

Change-Id: Ie95c91aae0ee623bbf50ff047190a0bbe59893d9
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/452440
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
Run-TryBot: Maceo Thompson <maceothompson@google.com>
2022-11-21 19:50:45 +00:00
Tatiana Bradley e21719caff internal/database, data/osv: trim whitespace characters in OSV description
In GenerateOSVEntry, replace all whitespace characters with single spaces
except for paragraph breaks represented by "\n\n".

Change-Id: Ia03f0b53c94979fada6316be1346df3f48b9fabe
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/439044
Run-TryBot: Tatiana Bradley <tatiana@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
2022-10-26 17:44:45 +00:00
Damien Neil ea89353760 data/osv: add OSV entries for all reports
Create data/osv, containing the OSV version for all reports.
This directory will be used as the source for database generation
in the future.

Set creation times on all existing reports; future reports will
take the creation time from the OSV entry history.

Change-Id: Ibe0f3a9fc76c0d4afee8102d6a0fd35c7641e97d
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/430682
Run-TryBot: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
2022-09-20 15:16:04 +00:00