From d3f9c47c2dd2dcc216326a2d0f08aeef15d255cd Mon Sep 17 00:00:00 2001 From: Weston Steimel Date: Tue, 6 Feb 2024 14:50:41 +0000 Subject: [PATCH] fix(ubuntu): emit vuln rows for out of support (#477) Ensure the ubuntu provider emits `wont-fix` vulnerability rows when the final state ends up as ignored and one of the end of support labels and there was no previous fix found after traversing git state Signed-off-by: Weston Steimel --- src/vunnel/providers/ubuntu/parser.py | 16 +++++++++++++--- .../snapshots/ubuntu:14.04/cve-2019-17185.json | 2 +- .../snapshots/ubuntu:14.04/cve-2021-4204.json | 2 +- .../snapshots/ubuntu:14.04/cve-2022-20566.json | 2 +- .../snapshots/ubuntu:14.04/cve-2022-41859.json | 2 +- .../snapshots/ubuntu:14.04/cve-2022-41860.json | 2 +- .../snapshots/ubuntu:14.04/cve-2022-41861.json | 2 +- .../snapshots/ubuntu:16.04/cve-2019-17185.json | 2 +- .../snapshots/ubuntu:16.04/cve-2021-4204.json | 2 +- .../snapshots/ubuntu:16.04/cve-2022-20566.json | 2 +- .../snapshots/ubuntu:16.04/cve-2022-41859.json | 2 +- .../snapshots/ubuntu:16.04/cve-2022-41860.json | 2 +- .../snapshots/ubuntu:16.04/cve-2022-41861.json | 2 +- .../snapshots/ubuntu:18.04/cve-2021-4204.json | 2 +- .../snapshots/ubuntu:19.10/cve-2019-17185.json | 2 +- .../snapshots/ubuntu:20.04/cve-2021-4204.json | 2 +- .../snapshots/ubuntu:21.04/cve-2021-4204.json | 2 +- .../snapshots/ubuntu:21.10/cve-2021-4204.json | 2 +- 18 files changed, 30 insertions(+), 20 deletions(-) diff --git a/src/vunnel/providers/ubuntu/parser.py b/src/vunnel/providers/ubuntu/parser.py index 35047af1..ca595736 100644 --- a/src/vunnel/providers/ubuntu/parser.py +++ b/src/vunnel/providers/ubuntu/parser.py @@ -37,7 +37,7 @@ # Per the Ubuntu README in the security tracker BZR repo: # Maps the state name to whether it indicates a package is vulnerable patch_states = { - "DNE": False, # Does Not Exist, no fix + "DNE": False, # Does Not Exist, the package is does not exist in a particular ubuntu release "needs-triage": False, # Not yet determined if CVE affects package, ignore in anchore until determination made "ignored": False, # CVE does not affect the package or no updates (e.g. end-of-life) (NOTE: should still report?) "not-affected": False, # The package is related to the issue, but not affected by it. @@ -148,6 +148,7 @@ def __init__(self): self.NamespaceName = None self.VersionFormat = None self.Version = None + self.VendorAdvisory = None class Severity(enum.IntEnum): @@ -283,7 +284,7 @@ def parse_patch(header: str, lines: list[str]) -> list[Patch]: # noqa: C901 status_match = _patch_state_regex.match(match.group(3)) if status_match and status_match.group(1): state = status_match.group(1) - if state in patch_states: # and patch_states[state]: + if state in patch_states: version = status_match.group(2) if version: version = version.strip() @@ -520,7 +521,9 @@ def map_parsed(parsed_cve: CVEFile, logger: logging.Logger | None = None): # no vulns[namespace_name] = r # If the patch status is one we care about, make the FixedIn record, else skip it but create CVE records - if check_state(p.status): + # We currently want to mark end-of-support records with no previously known fix as vulnerable, hence the + # or check_merge step here. + if check_state(p.status) or check_merge(p): pkg = FixedIn() pkg.Name = p.package @@ -542,6 +545,13 @@ def map_parsed(parsed_cve: CVEFile, logger: logging.Logger | None = None): # no else: pkg.Version = "None" + # Set NoAdvisory to true so that `wont-fix` status gets set on + # out of support entries + if p.status == "ignored": + pkg.VendorAdvisory = {"NoAdvisory": True} + + if not pkg.VendorAdvisory: + pkg.VendorAdvisory = {"NoAdvisory": False} pkg.VersionFormat = "dpkg" pkg.NamespaceName = namespace_name diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2019-17185.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2019-17185.json index d4ea14c7..0bf55fb6 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2019-17185.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2019-17185.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:14.04/cve-2019-17185","item":{"Vulnerability":{"Name":"CVE-2019-17185","NamespaceName":"ubuntu:14.04","Description":"","Severity":"Low","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2019-17185","FixedIn":[]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:14.04/cve-2019-17185","item":{"Vulnerability":{"Name":"CVE-2019-17185","NamespaceName":"ubuntu:14.04","Description":"","Severity":"Low","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2019-17185","FixedIn":[{"Name":"freeradius","NamespaceName":"ubuntu:14.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2021-4204.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2021-4204.json index 18c71e1c..70b0eeff 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2021-4204.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2021-4204.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:14.04/cve-2021-4204","item":{"Vulnerability":{"Name":"CVE-2021-4204","NamespaceName":"ubuntu:14.04","Description":"","Severity":"High","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2021-4204","FixedIn":[]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:14.04/cve-2021-4204","item":{"Vulnerability":{"Name":"CVE-2021-4204","NamespaceName":"ubuntu:14.04","Description":"","Severity":"High","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2021-4204","FixedIn":[{"Name":"linux-lts-xenial","NamespaceName":"ubuntu:14.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-aws","NamespaceName":"ubuntu:14.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-azure","NamespaceName":"ubuntu:14.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-fips","NamespaceName":"ubuntu:14.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-20566.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-20566.json index 133c52fa..444099a7 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-20566.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-20566.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:14.04/cve-2022-20566","item":{"Vulnerability":{"Name":"CVE-2022-20566","NamespaceName":"ubuntu:14.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-20566","FixedIn":[]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:14.04/cve-2022-20566","item":{"Vulnerability":{"Name":"CVE-2022-20566","NamespaceName":"ubuntu:14.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-20566","FixedIn":[{"Name":"linux","NamespaceName":"ubuntu:14.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-lts-xenial","NamespaceName":"ubuntu:14.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-aws","NamespaceName":"ubuntu:14.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-azure","NamespaceName":"ubuntu:14.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-fips","NamespaceName":"ubuntu:14.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-41859.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-41859.json index 7df5fa0b..5c12be2c 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-41859.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-41859.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:14.04/cve-2022-41859","item":{"Vulnerability":{"Name":"CVE-2022-41859","NamespaceName":"ubuntu:14.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-41859","FixedIn":[]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:14.04/cve-2022-41859","item":{"Vulnerability":{"Name":"CVE-2022-41859","NamespaceName":"ubuntu:14.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-41859","FixedIn":[{"Name":"freeradius","NamespaceName":"ubuntu:14.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-41860.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-41860.json index 251a0da1..d75c7e31 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-41860.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-41860.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:14.04/cve-2022-41860","item":{"Vulnerability":{"Name":"CVE-2022-41860","NamespaceName":"ubuntu:14.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-41860","FixedIn":[]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:14.04/cve-2022-41860","item":{"Vulnerability":{"Name":"CVE-2022-41860","NamespaceName":"ubuntu:14.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-41860","FixedIn":[{"Name":"freeradius","NamespaceName":"ubuntu:14.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-41861.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-41861.json index 12aa79c9..5ad7c88d 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-41861.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:14.04/cve-2022-41861.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:14.04/cve-2022-41861","item":{"Vulnerability":{"Name":"CVE-2022-41861","NamespaceName":"ubuntu:14.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-41861","FixedIn":[]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:14.04/cve-2022-41861","item":{"Vulnerability":{"Name":"CVE-2022-41861","NamespaceName":"ubuntu:14.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-41861","FixedIn":[{"Name":"freeradius","NamespaceName":"ubuntu:14.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2019-17185.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2019-17185.json index 3a807476..8935dd73 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2019-17185.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2019-17185.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:16.04/cve-2019-17185","item":{"Vulnerability":{"Name":"CVE-2019-17185","NamespaceName":"ubuntu:16.04","Description":"","Severity":"Low","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2019-17185","FixedIn":[]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:16.04/cve-2019-17185","item":{"Vulnerability":{"Name":"CVE-2019-17185","NamespaceName":"ubuntu:16.04","Description":"","Severity":"Low","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2019-17185","FixedIn":[{"Name":"freeradius","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2021-4204.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2021-4204.json index 5b69d022..24ea857b 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2021-4204.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2021-4204.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:16.04/cve-2021-4204","item":{"Vulnerability":{"Name":"CVE-2021-4204","NamespaceName":"ubuntu:16.04","Description":"","Severity":"High","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2021-4204","FixedIn":[]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:16.04/cve-2021-4204","item":{"Vulnerability":{"Name":"CVE-2021-4204","NamespaceName":"ubuntu:16.04","Description":"","Severity":"High","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2021-4204","FixedIn":[{"Name":"linux-hwe","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-kvm","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-aws","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-aws-hwe","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-azure","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-gcp","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-gke","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-oracle","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-raspi2","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-snapdragon","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-fips","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-20566.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-20566.json index db34e27d..f5dd9803 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-20566.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-20566.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:16.04/cve-2022-20566","item":{"Vulnerability":{"Name":"CVE-2022-20566","NamespaceName":"ubuntu:16.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-20566","FixedIn":[]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:16.04/cve-2022-20566","item":{"Vulnerability":{"Name":"CVE-2022-20566","NamespaceName":"ubuntu:16.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-20566","FixedIn":[{"Name":"linux","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-hwe","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-kvm","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-aws","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-aws-hwe","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-azure","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-fips","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-gcp","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-gke","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-oracle","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-raspi2","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-snapdragon","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-41859.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-41859.json index 1268987a..56ac42cf 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-41859.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-41859.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:16.04/cve-2022-41859","item":{"Vulnerability":{"Name":"CVE-2022-41859","NamespaceName":"ubuntu:16.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-41859","FixedIn":[]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:16.04/cve-2022-41859","item":{"Vulnerability":{"Name":"CVE-2022-41859","NamespaceName":"ubuntu:16.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-41859","FixedIn":[{"Name":"freeradius","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-41860.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-41860.json index 669938d9..ef1036dc 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-41860.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-41860.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:16.04/cve-2022-41860","item":{"Vulnerability":{"Name":"CVE-2022-41860","NamespaceName":"ubuntu:16.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-41860","FixedIn":[]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:16.04/cve-2022-41860","item":{"Vulnerability":{"Name":"CVE-2022-41860","NamespaceName":"ubuntu:16.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-41860","FixedIn":[{"Name":"freeradius","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-41861.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-41861.json index 3b7e4c07..74f53b65 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-41861.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:16.04/cve-2022-41861.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:16.04/cve-2022-41861","item":{"Vulnerability":{"Name":"CVE-2022-41861","NamespaceName":"ubuntu:16.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-41861","FixedIn":[]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:16.04/cve-2022-41861","item":{"Vulnerability":{"Name":"CVE-2022-41861","NamespaceName":"ubuntu:16.04","Description":"","Severity":"Medium","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2022-41861","FixedIn":[{"Name":"freeradius","NamespaceName":"ubuntu:16.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:18.04/cve-2021-4204.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:18.04/cve-2021-4204.json index 70cd72ec..22a6fd96 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:18.04/cve-2021-4204.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:18.04/cve-2021-4204.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:18.04/cve-2021-4204","item":{"Vulnerability":{"Name":"CVE-2021-4204","NamespaceName":"ubuntu:18.04","Description":"","Severity":"High","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2021-4204","FixedIn":[]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:18.04/cve-2021-4204","item":{"Vulnerability":{"Name":"CVE-2021-4204","NamespaceName":"ubuntu:18.04","Description":"","Severity":"High","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2021-4204","FixedIn":[{"Name":"linux-gke-4.15","NamespaceName":"ubuntu:18.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-gke-5.0","NamespaceName":"ubuntu:18.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-gke-5.3","NamespaceName":"ubuntu:18.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-oem","NamespaceName":"ubuntu:18.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-oem-osp1","NamespaceName":"ubuntu:18.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-raspi2-5.3","NamespaceName":"ubuntu:18.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:19.10/cve-2019-17185.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:19.10/cve-2019-17185.json index 0feb105c..ce0f7702 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:19.10/cve-2019-17185.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:19.10/cve-2019-17185.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:19.10/cve-2019-17185","item":{"Vulnerability":{"Name":"CVE-2019-17185","NamespaceName":"ubuntu:19.10","Description":"","Severity":"Low","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2019-17185","FixedIn":[]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:19.10/cve-2019-17185","item":{"Vulnerability":{"Name":"CVE-2019-17185","NamespaceName":"ubuntu:19.10","Description":"","Severity":"Low","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2019-17185","FixedIn":[{"Name":"freeradius","NamespaceName":"ubuntu:19.10","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:20.04/cve-2021-4204.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:20.04/cve-2021-4204.json index def1b722..766a3f3d 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:20.04/cve-2021-4204.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:20.04/cve-2021-4204.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:20.04/cve-2021-4204","item":{"Vulnerability":{"Name":"CVE-2021-4204","NamespaceName":"ubuntu:20.04","Description":"","Severity":"High","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2021-4204","FixedIn":[{"Name":"linux-hwe-5.11","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.11.0-46.51~20.04.1"},{"Name":"linux-aws-5.11","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.11.0-1025.27~20.04.1"},{"Name":"linux-azure-5.11","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.11.0-1025.27~20.04.1"},{"Name":"linux-gcp-5.11","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.11.0-1026.29~20.04.1"},{"Name":"linux-oracle-5.11","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.11.0-1025.27~20.04.1"},{"Name":"linux-oem-5.10","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.10.0-1055.58"},{"Name":"linux-oem-5.13","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.13.0-1026.32"},{"Name":"linux-oem-5.14","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.14.0-1018.19"},{"Name":"linux-riscv-5.11","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.11.0-1026.28~20.04.1"},{"Name":"linux-hwe-5.13","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.13.0-25.26~20.04.1"},{"Name":"linux-aws-5.13","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.13.0-1011.12~20.04.1"},{"Name":"linux-oracle-5.13","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.13.0-1015.19~20.04.1"},{"Name":"linux-gcp-5.13","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.13.0-1012.15~20.04.1"},{"Name":"linux-azure-5.13","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.13.0-1012.14~20.04.1"}]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:20.04/cve-2021-4204","item":{"Vulnerability":{"Name":"CVE-2021-4204","NamespaceName":"ubuntu:20.04","Description":"","Severity":"High","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2021-4204","FixedIn":[{"Name":"linux-hwe-5.11","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.11.0-46.51~20.04.1","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-aws-5.11","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.11.0-1025.27~20.04.1","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-azure-5.11","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.11.0-1025.27~20.04.1","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-gcp-5.11","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.11.0-1026.29~20.04.1","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-oracle-5.11","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.11.0-1025.27~20.04.1","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-oem-5.10","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.10.0-1055.58","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-oem-5.13","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.13.0-1026.32","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-oem-5.14","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.14.0-1018.19","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-riscv-5.11","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.11.0-1026.28~20.04.1","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-hwe-5.13","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.13.0-25.26~20.04.1","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-aws-5.13","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.13.0-1011.12~20.04.1","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-oracle-5.13","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.13.0-1015.19~20.04.1","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-gcp-5.13","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.13.0-1012.15~20.04.1","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-azure-5.13","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"5.13.0-1012.14~20.04.1","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-hwe-5.8","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-aws-5.8","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-azure-5.8","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-gcp-5.8","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-intel-5.13","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-oracle-5.8","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-oem-5.6","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}},{"Name":"linux-riscv-5.8","NamespaceName":"ubuntu:20.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:21.04/cve-2021-4204.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:21.04/cve-2021-4204.json index 4b548c2a..160f99be 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:21.04/cve-2021-4204.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:21.04/cve-2021-4204.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:21.04/cve-2021-4204","item":{"Vulnerability":{"Name":"CVE-2021-4204","NamespaceName":"ubuntu:21.04","Description":"","Severity":"High","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2021-4204","FixedIn":[{"Name":"linux","NamespaceName":"ubuntu:21.04","VersionFormat":"dpkg","Version":"5.11.0-46.51"},{"Name":"linux-kvm","NamespaceName":"ubuntu:21.04","VersionFormat":"dpkg","Version":"5.11.0-1022.24"},{"Name":"linux-aws","NamespaceName":"ubuntu:21.04","VersionFormat":"dpkg","Version":"5.11.0-1025.27"},{"Name":"linux-azure","NamespaceName":"ubuntu:21.04","VersionFormat":"dpkg","Version":"5.11.0-1025.27"},{"Name":"linux-gcp","NamespaceName":"ubuntu:21.04","VersionFormat":"dpkg","Version":"5.11.0-1026.29"},{"Name":"linux-oracle","NamespaceName":"ubuntu:21.04","VersionFormat":"dpkg","Version":"5.11.0-1025.27"},{"Name":"linux-raspi","NamespaceName":"ubuntu:21.04","VersionFormat":"dpkg","Version":"5.11.0-1025.27"}]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:21.04/cve-2021-4204","item":{"Vulnerability":{"Name":"CVE-2021-4204","NamespaceName":"ubuntu:21.04","Description":"","Severity":"High","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2021-4204","FixedIn":[{"Name":"linux","NamespaceName":"ubuntu:21.04","VersionFormat":"dpkg","Version":"5.11.0-46.51","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-kvm","NamespaceName":"ubuntu:21.04","VersionFormat":"dpkg","Version":"5.11.0-1022.24","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-aws","NamespaceName":"ubuntu:21.04","VersionFormat":"dpkg","Version":"5.11.0-1025.27","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-azure","NamespaceName":"ubuntu:21.04","VersionFormat":"dpkg","Version":"5.11.0-1025.27","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-gcp","NamespaceName":"ubuntu:21.04","VersionFormat":"dpkg","Version":"5.11.0-1026.29","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-oracle","NamespaceName":"ubuntu:21.04","VersionFormat":"dpkg","Version":"5.11.0-1025.27","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-raspi","NamespaceName":"ubuntu:21.04","VersionFormat":"dpkg","Version":"5.11.0-1025.27","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-riscv","NamespaceName":"ubuntu:21.04","VersionFormat":"dpkg","Version":"None","VendorAdvisory":{"NoAdvisory":true}}]}}} diff --git a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:21.10/cve-2021-4204.json b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:21.10/cve-2021-4204.json index 58cf7f32..edb621f4 100644 --- a/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:21.10/cve-2021-4204.json +++ b/tests/unit/providers/ubuntu/test-fixtures/snapshots/ubuntu:21.10/cve-2021-4204.json @@ -1 +1 @@ -{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:21.10/cve-2021-4204","item":{"Vulnerability":{"Name":"CVE-2021-4204","NamespaceName":"ubuntu:21.10","Description":"","Severity":"High","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2021-4204","FixedIn":[{"Name":"linux","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-25.26"},{"Name":"linux-kvm","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-1008.8"},{"Name":"linux-aws","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-1009.10"},{"Name":"linux-azure","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-1010.11"},{"Name":"linux-gcp","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-1010.12"},{"Name":"linux-oracle","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-1013.16"},{"Name":"linux-raspi","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-1013.15"},{"Name":"linux-riscv","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-1008.8"}]}}} +{"schema":"https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json","identifier":"ubuntu:21.10/cve-2021-4204","item":{"Vulnerability":{"Name":"CVE-2021-4204","NamespaceName":"ubuntu:21.10","Description":"","Severity":"High","Metadata":{},"Link":"https://ubuntu.com/security/CVE-2021-4204","FixedIn":[{"Name":"linux","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-25.26","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-kvm","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-1008.8","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-aws","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-1009.10","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-azure","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-1010.11","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-gcp","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-1010.12","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-oracle","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-1013.16","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-raspi","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-1013.15","VendorAdvisory":{"NoAdvisory":false}},{"Name":"linux-riscv","NamespaceName":"ubuntu:21.10","VersionFormat":"dpkg","Version":"5.13.0-1008.8","VendorAdvisory":{"NoAdvisory":false}}]}}}