nlnet labs updates

Signed-off-by: Weston Steimel <commits@weston.slmail.me>
anchore · May 21, 2024 · a2ba0e0 · a2ba0e0
1 parent 3fed103
commit a2ba0e0
Show file tree

Hide file tree

Showing 2 changed files with 78 additions and 0 deletions.
diff --git a/data/anchore/2024/CVE-2024-1622.json b/data/anchore/2024/CVE-2024-1622.json
@@ -0,0 +1,39 @@
+{
+  "additionalMetadata": {
+    "cna": "nlnet labs",
+    "cveId": "CVE-2024-1622",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N2N3N3SNBHSH7GN3JOLR7YUF5FCTQQ5O/",
+      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HPRUIPAI2BBDGFVLN733JLIUJWLEBLF/",
+      "https://www.nlnetlabs.nl/downloads/routinator/CVE-2024-1622.txt",
+      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K52QRRYBHLP73RAS3CGOPBWYT7EZVP6O/"
+    ],
+    "solutions": [
+      "This issue is fixed in 0.13.2 and all later versions."
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:nlnetlabs:routinator:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Routinator",
+        "vendor": "NLnet Labs",
+        "versions": [
+          {
+            "lessThan": "0.13.2",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-1931.json b/data/anchore/2024/CVE-2024-1931.json
@@ -0,0 +1,39 @@
+{
+  "additionalMetadata": {
+    "cna": "nlnet labs",
+    "cveId": "CVE-2024-1931",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B2JUIFPA7H75Q2W3VXW2TUNHK6NVGOX4/",
+      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RBR4H7RCVMJ6H76S4LLRSY5EBFTYWGXK/",
+      "https://www.nlnetlabs.nl/downloads/unbound/CVE-2024-1931.txt",
+      "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4VCBRQ7KMSIGBQ6A4SBL5PF326DIJIIV/"
+    ],
+    "solutions": [
+      "This issue is fixed in 1.19.2 and all later versions. For the vulnerable versions 1.18.0 up to and including 1.19.1, the option 'ede: no' (default configuration) is also a solution as it does not exercise the vulnerable code path."
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:nlnetlabs:unbound:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Unbound",
+        "vendor": "NLnet Labs",
+        "versions": [
+          {
+            "lessThan": "1.19.2",
+            "status": "affected",
+            "version": "1.18.0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}