conversion for libreswan records

Signed-off-by: Weston Steimel <[email protected]>
anchore · May 21, 2024 · 3fed103 · 3fed103
1 parent dcb2ef5
commit 3fed103
Show file tree

Hide file tree

Showing 2 changed files with 92 additions and 0 deletions.
diff --git a/data/anchore/2024/CVE-2024-2357.json b/data/anchore/2024/CVE-2024-2357.json
@@ -0,0 +1,50 @@
+{
+  "additionalMetadata": {
+    "cna": "libreswan",
+    "cveId": "CVE-2024-2357",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/HEM46ALKF7NG6CAUKZ7KQERVOHWQIQKY/",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/TVQ7MZY6LFFGRWAJNTKKN2VSEFS2VPAR/",
+      "https://libreswan.org/security/CVE-2024-2357",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/EJZJYFHKBIJ4ZK5GAWWFFR3AKJS6O5JX/"
+    ],
+    "solutions": [
+      "This issue is fixed in 4.13, 5.0 and all later versions."
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:libreswan:libreswan:*:*:*:*:*:*:*:*"
+        ],
+        "product": "libreswan",
+        "vendor": "The Libreswan Project (www.libreswan.org)",
+        "versions": [
+          {
+            "lessThanOrEqual": "4.1",
+            "status": "unaffected",
+            "version": "3.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "4.13",
+            "status": "affected",
+            "version": "4.2",
+            "versionType": "semver"
+          },
+          {
+            "status": "unaffected",
+            "version": "5.0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-3652.json b/data/anchore/2024/CVE-2024-3652.json
@@ -0,0 +1,42 @@
+{
+  "additionalMetadata": {
+    "cna": "libreswan",
+    "cveId": "CVE-2024-3652",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://libreswan.org/security/CVE-2024-3652",
+      "http://www.openwall.com/lists/oss-security/2024/04/18/2"
+    ],
+    "solutions": [
+      "This issue is fixed in 4.15 and all later versions."
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:libreswan:libreswan:*:*:*:*:*:*:*:*"
+        ],
+        "product": "libreswan",
+        "vendor": "The Libreswan Project (www.libreswan.org)",
+        "versions": [
+          {
+            "lessThan": "4.15",
+            "status": "affected",
+            "version": "3.22",
+            "versionType": "semver"
+          },
+          {
+            "status": "unaffected",
+            "version": "5.0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}