improve exiv2 entries

Signed-off-by: Weston Steimel <[email protected]>
anchore · Oct 18, 2024 · 6eec174 · 6eec174
1 parent f7394d1
commit 6eec174
Show file tree

Hide file tree

Showing 2 changed files with 42 additions and 8 deletions.
diff --git a/data/anchore/2024/CVE-2024-24826.json b/data/anchore/2024/CVE-2024-24826.json
@@ -11,13 +11,11 @@
   "adp": {
     "affected": [
       {
-        "collectionURL": "https://pypi.org",
         "cpes": [
-          "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:python:*:*"
+          "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*"
         ],
-        "packageName": "exiv2",
-        "packageType": "python",
         "product": "exiv2",
+        "repo": "https://github.com/Exiv2/exiv2",
         "vendor": "Exiv2",
         "versions": [
           {
@@ -27,6 +25,25 @@
             "versionType": "python"
           }
         ]
+      },
+      {
+        "collectionURL": "https://pypi.org",
+        "cpes": [
+          "cpe:2.3:a:jim-easterbrook:python-exiv2:*:*:*:*:*:python:*:*"
+        ],
+        "packageName": "exiv2",
+        "packageType": "python",
+        "product": "python-exiv2",
+        "repo": "https://github.com/jim-easterbrook/python-exiv2",
+        "vendor": "jim-easterbrook",
+        "versions": [
+          {
+            "lessThan": "0.16.1",
+            "status": "affected",
+            "version": "0.16.0",
+            "versionType": "python"
+          }
+        ]
       }
     ],
     "providerMetadata": {

diff --git a/data/anchore/2024/CVE-2024-25112.json b/data/anchore/2024/CVE-2024-25112.json
@@ -11,13 +11,11 @@
   "adp": {
     "affected": [
       {
-        "collectionURL": "https://pypi.org",
         "cpes": [
-          "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:python:*:*"
+          "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*"
         ],
-        "packageName": "exiv2",
-        "packageType": "python",
         "product": "exiv2",
+        "repo": "https://github.com/Exiv2/exiv2",
         "vendor": "Exiv2",
         "versions": [
           {
@@ -27,6 +25,25 @@
             "versionType": "python"
           }
         ]
+      },
+      {
+        "collectionURL": "https://pypi.org",
+        "cpes": [
+          "cpe:2.3:a:jim-easterbrook:python-exiv2:*:*:*:*:*:python:*:*"
+        ],
+        "packageName": "exiv2",
+        "packageType": "python",
+        "product": "python-exiv2",
+        "repo": "https://github.com/jim-easterbrook/python-exiv2",
+        "vendor": "jim-easterbrook",
+        "versions": [
+          {
+            "lessThan": "0.16.1",
+            "status": "affected",
+            "version": "0.16.0",
+            "versionType": "python"
+          }
+        ]
       }
     ],
     "providerMetadata": {