From 6eec1747c50c5e3ae895f93d3ef69f72d3439a1a Mon Sep 17 00:00:00 2001 From: Weston Steimel Date: Fri, 18 Oct 2024 10:42:13 +0100 Subject: [PATCH] improve exiv2 entries Signed-off-by: Weston Steimel --- data/anchore/2024/CVE-2024-24826.json | 25 +++++++++++++++++++++---- data/anchore/2024/CVE-2024-25112.json | 25 +++++++++++++++++++++---- 2 files changed, 42 insertions(+), 8 deletions(-) diff --git a/data/anchore/2024/CVE-2024-24826.json b/data/anchore/2024/CVE-2024-24826.json index 806bab1c..21d8e6f8 100644 --- a/data/anchore/2024/CVE-2024-24826.json +++ b/data/anchore/2024/CVE-2024-24826.json @@ -11,13 +11,11 @@ "adp": { "affected": [ { - "collectionURL": "https://pypi.org", "cpes": [ - "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:python:*:*" + "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*" ], - "packageName": "exiv2", - "packageType": "python", "product": "exiv2", + "repo": "https://github.com/Exiv2/exiv2", "vendor": "Exiv2", "versions": [ { @@ -27,6 +25,25 @@ "versionType": "python" } ] + }, + { + "collectionURL": "https://pypi.org", + "cpes": [ + "cpe:2.3:a:jim-easterbrook:python-exiv2:*:*:*:*:*:python:*:*" + ], + "packageName": "exiv2", + "packageType": "python", + "product": "python-exiv2", + "repo": "https://github.com/jim-easterbrook/python-exiv2", + "vendor": "jim-easterbrook", + "versions": [ + { + "lessThan": "0.16.1", + "status": "affected", + "version": "0.16.0", + "versionType": "python" + } + ] } ], "providerMetadata": { diff --git a/data/anchore/2024/CVE-2024-25112.json b/data/anchore/2024/CVE-2024-25112.json index 4091287f..b7634fb1 100644 --- a/data/anchore/2024/CVE-2024-25112.json +++ b/data/anchore/2024/CVE-2024-25112.json @@ -11,13 +11,11 @@ "adp": { "affected": [ { - "collectionURL": "https://pypi.org", "cpes": [ - "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:python:*:*" + "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*" ], - "packageName": "exiv2", - "packageType": "python", "product": "exiv2", + "repo": "https://github.com/Exiv2/exiv2", "vendor": "Exiv2", "versions": [ { @@ -27,6 +25,25 @@ "versionType": "python" } ] + }, + { + "collectionURL": "https://pypi.org", + "cpes": [ + "cpe:2.3:a:jim-easterbrook:python-exiv2:*:*:*:*:*:python:*:*" + ], + "packageName": "exiv2", + "packageType": "python", + "product": "python-exiv2", + "repo": "https://github.com/jim-easterbrook/python-exiv2", + "vendor": "jim-easterbrook", + "versions": [ + { + "lessThan": "0.16.1", + "status": "affected", + "version": "0.16.0", + "versionType": "python" + } + ] } ], "providerMetadata": {