Skip to content

Commit fc88a43

Browse files
ziadhanyziadhany
committed
Add missing affected_packages
Signed-off-by: ziad hany <ziadhany2016@gmail.com>
1 parent 7a48fa3 commit fc88a43

File tree

5 files changed

+269
-45
lines changed

5 files changed

+269
-45
lines changed

‎vulnerabilities/pipelines/v2_importers/retiredotnet_importer.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -94,7 +94,7 @@ def collect_advisories(self):
9494
if fixed_versions:
9595
fixed_version_range = NugetVersionRange.from_versions(affected_versions)
9696

97-
if affected_packages:
97+
if affected_version_range or fixed_version_range:
9898
affected_packages.append(
9999
AffectedPackageV2(
100100
package=PackageURL(type="nuget", name=name),

‎vulnerabilities/tests/pipelines/v2_importers/test_retiredotnet_imprter.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ def test_vuln_id_from_desc():
3535
@pytest.mark.django_db
3636
def test_retiredotnet_advisories_per_file():
3737
pipeline = RetireDotnetImporterPipeline()
38-
test_file = TEST_DATA / "1.json"
38+
test_file = TEST_DATA / "12.json"
3939
expected_file = TEST_DATA / "expected_file.json"
4040
pipeline.vcs_response = Mock(dest_dir=TEST_DATA)
4141

‎vulnerabilities/tests/test_data/retiredotnet_v2/1.json‎

Lines changed: 0 additions & 37 deletions
This file was deleted.

‎vulnerabilities/tests/test_data/retiredotnet_v2/12.json‎

Lines changed: 176 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,176 @@
1+
{
2+
"link": "https://github.com/aspnet/Announcements/issues/334",
3+
"description": "Microsoft Security Advisory CVE-2019-0564: ASP.NET Core Denial of Service Vulnerability",
4+
"packages": [
5+
{
6+
"id": "Microsoft.AspNetCore.WebSockets",
7+
"affected": "2.1.0",
8+
"fix": "2.1.7"
9+
},
10+
{
11+
"id": "Microsoft.AspNetCore.WebSockets",
12+
"affected": "2.1.1",
13+
"fix": "2.1.7"
14+
},
15+
{
16+
"id": "Microsoft.AspNetCore.WebSockets",
17+
"affected": "2.2.0",
18+
"fix": "2.2.1"
19+
},
20+
{
21+
"id": "Microsoft.AspNetCore.Server.Kestrel.Core",
22+
"affected": "2.1.0",
23+
"fix": "2.1.7"
24+
},
25+
{
26+
"id": "Microsoft.AspNetCore.Server.Kestrel.Core",
27+
"affected": "2.1.1",
28+
"fix": "2.1.7"
29+
},
30+
{
31+
"id": "Microsoft.AspNetCore.Server.Kestrel.Core",
32+
"affected": "2.1.2",
33+
"fix": "2.1.7"
34+
},
35+
{
36+
"id": "Microsoft.AspNetCore.Server.Kestrel.Core",
37+
"affected": "2.1.3",
38+
"fix": "2.1.7"
39+
},
40+
{
41+
"id": "System.Net.WebSockets.WebSocketProtocol",
42+
"affected": "4.5.0",
43+
"fix": "4.5.3"
44+
},
45+
{
46+
"id": "System.Net.WebSockets.WebSocketProtocol",
47+
"affected": "4.5.1",
48+
"fix": "4.5.3"
49+
},
50+
{
51+
"id": "System.Net.WebSockets.WebSocketProtocol",
52+
"affected": "4.5.2",
53+
"fix": "4.5.3"
54+
},
55+
{
56+
"id": "Microsoft.NETCore.App",
57+
"affected": "2.1.0",
58+
"fix": "2.1.7"
59+
},
60+
{
61+
"id": "Microsoft.NETCore.App",
62+
"affected": "2.1.1",
63+
"fix": "2.1.7"
64+
},
65+
{
66+
"id": "Microsoft.NETCore.App",
67+
"affected": "2.1.2",
68+
"fix": "2.1.7"
69+
},
70+
{
71+
"id": "Microsoft.NETCore.App",
72+
"affected": "2.1.3",
73+
"fix": "2.1.7"
74+
},
75+
{
76+
"id": "Microsoft.NETCore.App",
77+
"affected": "2.1.4",
78+
"fix": "2.1.7"
79+
},
80+
{
81+
"id": "Microsoft.NETCore.App",
82+
"affected": "2.1.5",
83+
"fix": "2.1.7"
84+
},
85+
{
86+
"id": "Microsoft.NETCore.App",
87+
"affected": "2.1.6",
88+
"fix": "2.1.7"
89+
},
90+
{
91+
"id": "Microsoft.NETCore.App",
92+
"affected": "2.2.0",
93+
"fix": "2.2.1"
94+
},
95+
{
96+
"id": "Microsoft.AspNetCore.App",
97+
"affected": "2.1.0",
98+
"fix": "2.1.7"
99+
},
100+
{
101+
"id": "Microsoft.AspNetCore.App",
102+
"affected": "2.1.1",
103+
"fix": "2.1.7"
104+
},
105+
{
106+
"id": "Microsoft.AspNetCore.App",
107+
"affected": "2.1.2",
108+
"fix": "2.1.7"
109+
},
110+
{
111+
"id": "Microsoft.AspNetCore.App",
112+
"affected": "2.1.3",
113+
"fix": "2.1.7"
114+
},
115+
{
116+
"id": "Microsoft.AspNetCore.App",
117+
"affected": "2.1.4",
118+
"fix": "2.1.7"
119+
},
120+
{
121+
"id": "Microsoft.AspNetCore.App",
122+
"affected": "2.1.5",
123+
"fix": "2.1.7"
124+
},
125+
{
126+
"id": "Microsoft.AspNetCore.App",
127+
"affected": "2.1.6",
128+
"fix": "2.1.7"
129+
},
130+
{
131+
"id": "Microsoft.AspNetCore.App",
132+
"affected": "2.2.0",
133+
"fix": "2.2.1"
134+
},
135+
{
136+
"id": "Microsoft.AspNetCore.All",
137+
"affected": "2.1.0",
138+
"fix": "2.1.7"
139+
},
140+
{
141+
"id": "Microsoft.AspNetCore.All",
142+
"affected": "2.1.1",
143+
"fix": "2.1.7"
144+
},
145+
{
146+
"id": "Microsoft.AspNetCore.All",
147+
"affected": "2.1.2",
148+
"fix": "2.1.7"
149+
},
150+
{
151+
"id": "Microsoft.AspNetCore.All",
152+
"affected": "2.1.3",
153+
"fix": "2.1.7"
154+
},
155+
{
156+
"id": "Microsoft.AspNetCore.All",
157+
"affected": "2.1.4",
158+
"fix": "2.1.7"
159+
},
160+
{
161+
"id": "Microsoft.AspNetCore.All",
162+
"affected": "2.1.5",
163+
"fix": "2.1.7"
164+
},
165+
{
166+
"id": "Microsoft.AspNetCore.All",
167+
"affected": "2.1.6",
168+
"fix": "2.1.7"
169+
},
170+
{
171+
"id": "Microsoft.AspNetCore.All",
172+
"affected": "2.2.0",
173+
"fix": "2.2.1"
174+
}
175+
]
176+
}

‎vulnerabilities/tests/test_data/retiredotnet_v2/expected_file.json‎

Lines changed: 91 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,22 +1,107 @@
11
[
22
{
3-
"advisory_id": "RetireNet-1",
3+
"advisory_id": "RetireNet-12",
44
"aliases": [
5-
"CVE-2019-0982"
5+
"CVE-2019-0564"
6+
],
7+
"summary": "Microsoft Security Advisory CVE-2019-0564: ASP.NET Core Denial of Service Vulnerability",
8+
"affected_packages": [
9+
{
10+
"package": {
11+
"type": "nuget",
12+
"namespace": "",
13+
"name": "Microsoft.AspNetCore.All",
14+
"version": "",
15+
"qualifiers": "",
16+
"subpath": ""
17+
},
18+
"affected_version_range": "vers:nuget/2.1.0|2.1.1|2.1.2|2.1.3|2.1.4|2.1.5|2.1.6|2.2.0",
19+
"fixed_version_range": "vers:nuget/2.1.0|2.1.1|2.1.2|2.1.3|2.1.4|2.1.5|2.1.6|2.2.0",
20+
"introduced_by_commit_patches": [],
21+
"fixed_by_commit_patches": []
22+
},
23+
{
24+
"package": {
25+
"type": "nuget",
26+
"namespace": "",
27+
"name": "Microsoft.AspNetCore.App",
28+
"version": "",
29+
"qualifiers": "",
30+
"subpath": ""
31+
},
32+
"affected_version_range": "vers:nuget/2.1.0|2.1.1|2.1.2|2.1.3|2.1.4|2.1.5|2.1.6|2.2.0",
33+
"fixed_version_range": "vers:nuget/2.1.0|2.1.1|2.1.2|2.1.3|2.1.4|2.1.5|2.1.6|2.2.0",
34+
"introduced_by_commit_patches": [],
35+
"fixed_by_commit_patches": []
36+
},
37+
{
38+
"package": {
39+
"type": "nuget",
40+
"namespace": "",
41+
"name": "Microsoft.AspNetCore.Server.Kestrel.Core",
42+
"version": "",
43+
"qualifiers": "",
44+
"subpath": ""
45+
},
46+
"affected_version_range": "vers:nuget/2.1.0|2.1.1|2.1.2|2.1.3",
47+
"fixed_version_range": "vers:nuget/2.1.0|2.1.1|2.1.2|2.1.3",
48+
"introduced_by_commit_patches": [],
49+
"fixed_by_commit_patches": []
50+
},
51+
{
52+
"package": {
53+
"type": "nuget",
54+
"namespace": "",
55+
"name": "Microsoft.AspNetCore.WebSockets",
56+
"version": "",
57+
"qualifiers": "",
58+
"subpath": ""
59+
},
60+
"affected_version_range": "vers:nuget/2.1.0|2.1.1|2.2.0",
61+
"fixed_version_range": "vers:nuget/2.1.0|2.1.1|2.2.0",
62+
"introduced_by_commit_patches": [],
63+
"fixed_by_commit_patches": []
64+
},
65+
{
66+
"package": {
67+
"type": "nuget",
68+
"namespace": "",
69+
"name": "Microsoft.NETCore.App",
70+
"version": "",
71+
"qualifiers": "",
72+
"subpath": ""
73+
},
74+
"affected_version_range": "vers:nuget/2.1.0|2.1.1|2.1.2|2.1.3|2.1.4|2.1.5|2.1.6|2.2.0",
75+
"fixed_version_range": "vers:nuget/2.1.0|2.1.1|2.1.2|2.1.3|2.1.4|2.1.5|2.1.6|2.2.0",
76+
"introduced_by_commit_patches": [],
77+
"fixed_by_commit_patches": []
78+
},
79+
{
80+
"package": {
81+
"type": "nuget",
82+
"namespace": "",
83+
"name": "System.Net.WebSockets.WebSocketProtocol",
84+
"version": "",
85+
"qualifiers": "",
86+
"subpath": ""
87+
},
88+
"affected_version_range": "vers:nuget/4.5.0|4.5.1|4.5.2",
89+
"fixed_version_range": "vers:nuget/4.5.0|4.5.1|4.5.2",
90+
"introduced_by_commit_patches": [],
91+
"fixed_by_commit_patches": []
92+
}
693
],
7-
"summary": "Microsoft Security Advisory CVE-2019-0982: ASP.NET Core Denial of Service Vulnerability",
8-
"affected_packages": [],
994
"references_v2": [
1095
{
1196
"reference_id": "",
1297
"reference_type": "",
13-
"url": "https://github.com/aspnet/Announcements/issues/359"
98+
"url": "https://github.com/aspnet/Announcements/issues/334"
1499
}
15100
],
16101
"patches": [],
17102
"severities": [],
18103
"date_published": null,
19104
"weaknesses": [],
20-
"url": "https://github.com/RetireNet/Packages/blob/master/1.json"
105+
"url": "https://github.com/RetireNet/Packages/blob/master/12.json"
21106
}
22107
]

0 commit comments

Comments
 (0)