Skip to content

Commit

Permalink
add v1.3.1 fix for minizip on CVE-2023-45853
Browse files Browse the repository at this point in the history
Signed-off-by: Weston Steimel <[email protected]>
  • Loading branch information
westonsteimel committed Mar 22, 2024
1 parent a31749c commit 3d6996c
Show file tree
Hide file tree
Showing 2 changed files with 70 additions and 0 deletions.
22 changes: 22 additions & 0 deletions .snapshot/2023/CVE-2023-45853.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
{
"cve": {
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.3",
"matchCriteriaId": "BCAD5846-089D-4749-88B4-20243BC19B29"
}
]
}
]
}
]
}
}
48 changes: 48 additions & 0 deletions data/2023/CVE-2023-45853.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,48 @@
{
"_annotation": {
"cve_id": "CVE-2023-45853",
"reason": "Adjust CPE configurations to indicate that version 1.3.1 addressing the flaw is published.",
"snapshot": "https://raw.githubusercontent.com/anchore/nvd-data-overrides/main/.snapshot/2023/CVE-2023-45853.json",
"triage_notes": {
"references": [
"http://www.openwall.com/lists/oss-security/2023/10/20/9",
"http://www.openwall.com/lists/oss-security/2024/01/24/10",
"https://chromium.googlesource.com/chromium/src/+/d709fb23806858847131027da95ef4c548813356",
"https://chromium.googlesource.com/chromium/src/+/de29dd6c7151d3cd37cb4cf0036800ddfb1d8b61",
"https://github.com/madler/zlib/blob/ac8f12c97d1afd9bafa9c710f827d40a407d3266/contrib/README.contrib#L1-L4",
"https://github.com/madler/zlib/pull/843",
"https://lists.debian.org/debian-lts-announce/2023/11/msg00026.html",
"https://pypi.org/project/pyminizip/#history",
"https://security.gentoo.org/glsa/202401-18",
"https://security.netapp.com/advisory/ntap-20231130-0009/",
"https://www.winimage.com/zLibDll/minizip.html"
]
}
},
"cve": {
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.3.1",
"matchCriteriaId": "BCAD5846-089D-4749-88B4-20243BC19B29"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:minizip_project:minizip:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.3.1",
"matchCriteriaId": "BC47E980-0A5C-410D-98B7-C0ED58B53D08"
}
]
}
]
}
]
}
}

0 comments on commit 3d6996c

Please sign in to comment.