data/reports: preserve CVE refs added by CVE program

Change-Id: I55d25aa87779cdbe74479cf3bc4df6c2a49ef819 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/547495 LUCI-TryBot-Result: Go LUCI <[email protected]> Reviewed-by: Damien Neil <[email protected]>
golang · Dec 6, 2023 · bcb698b · bcb698b
1 parent ddd21a4
commit bcb698b
Show file tree

Hide file tree

Showing 48 changed files with 199 additions and 0 deletions.
diff --git a/data/cve/v5/GO-2022-1037.json b/data/cve/v5/GO-2022-1037.json
@@ -78,6 +78,9 @@
         },
         {
           "url": "https://pkg.go.dev/vuln/GO-2022-1037"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2022-1038.json b/data/cve/v5/GO-2022-1038.json
@@ -66,6 +66,9 @@
         },
         {
           "url": "https://pkg.go.dev/vuln/GO-2022-1038"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2022-1039.json b/data/cve/v5/GO-2022-1039.json
@@ -78,6 +78,9 @@
         },
         {
           "url": "https://pkg.go.dev/vuln/GO-2022-1039"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2022-1144.json b/data/cve/v5/GO-2022-1144.json
@@ -146,6 +146,21 @@
         },
         {
           "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/WPEIZ7AMEJCZXU3FEJZMVRNHQZXX5P3I/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/CSVIS6MTMFVBA7JPMRAUNKUOYEVSJYSB/"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-1569.json b/data/cve/v5/GO-2023-1569.json
@@ -66,6 +66,9 @@
         },
         {
           "url": "https://pkg.go.dev/vuln/GO-2023-1569"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-1570.json b/data/cve/v5/GO-2023-1570.json
@@ -267,6 +267,9 @@
         },
         {
           "url": "https://pkg.go.dev/vuln/GO-2023-1570"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-1571.json b/data/cve/v5/GO-2023-1571.json
@@ -391,6 +391,18 @@
         },
         {
           "url": "https://www.couchbase.com/alerts/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-1702.json b/data/cve/v5/GO-2023-1702.json
@@ -69,6 +69,9 @@
         },
         {
           "url": "https://pkg.go.dev/vuln/GO-2023-1702"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-1703.json b/data/cve/v5/GO-2023-1703.json
@@ -75,6 +75,9 @@
         },
         {
           "url": "https://pkg.go.dev/vuln/GO-2023-1703"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-1704.json b/data/cve/v5/GO-2023-1704.json
@@ -75,6 +75,9 @@
         },
         {
           "url": "https://security.netapp.com/advisory/ntap-20230526-0007/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-1705.json b/data/cve/v5/GO-2023-1705.json
@@ -128,6 +128,9 @@
         },
         {
           "url": "https://security.netapp.com/advisory/ntap-20230526-0007/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-1839.json b/data/cve/v5/GO-2023-1839.json
@@ -67,6 +67,9 @@
         },
         {
           "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/NZ2O6YCO2IZMZJELQGZYR2WAUNEDLYV6/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-1840.json b/data/cve/v5/GO-2023-1840.json
@@ -67,6 +67,9 @@
         },
         {
           "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/NZ2O6YCO2IZMZJELQGZYR2WAUNEDLYV6/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-1841.json b/data/cve/v5/GO-2023-1841.json
@@ -67,6 +67,9 @@
         },
         {
           "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/NZ2O6YCO2IZMZJELQGZYR2WAUNEDLYV6/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-1842.json b/data/cve/v5/GO-2023-1842.json
@@ -88,6 +88,9 @@
         },
         {
           "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/NZ2O6YCO2IZMZJELQGZYR2WAUNEDLYV6/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-1878.json b/data/cve/v5/GO-2023-1878.json
@@ -114,6 +114,9 @@
         },
         {
           "url": "https://security.netapp.com/advisory/ntap-20230814-0002/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-1987.json b/data/cve/v5/GO-2023-1987.json
@@ -102,6 +102,9 @@
         },
         {
           "url": "https://security.netapp.com/advisory/ntap-20230831-0010/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-2041.json b/data/cve/v5/GO-2023-2041.json
@@ -84,6 +84,9 @@
         },
         {
           "url": "https://security.netapp.com/advisory/ntap-20231020-0009/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-2042.json b/data/cve/v5/GO-2023-2042.json
@@ -58,6 +58,9 @@
         },
         {
           "url": "https://security.netapp.com/advisory/ntap-20231020-0004/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-2043.json b/data/cve/v5/GO-2023-2043.json
@@ -81,6 +81,9 @@
         },
         {
           "url": "https://security.netapp.com/advisory/ntap-20231020-0009/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-2044.json b/data/cve/v5/GO-2023-2044.json
@@ -63,6 +63,9 @@
         },
         {
           "url": "https://security.netapp.com/advisory/ntap-20231020-0004/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-2045.json b/data/cve/v5/GO-2023-2045.json
@@ -63,6 +63,9 @@
         },
         {
           "url": "https://security.netapp.com/advisory/ntap-20231020-0004/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ],
       "credits": [

diff --git a/data/cve/v5/GO-2023-2095.json b/data/cve/v5/GO-2023-2095.json
@@ -73,6 +73,9 @@
         },
         {
           "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
         }
       ]
     }

diff --git a/data/cve/v5/GO-2023-2102.json b/data/cve/v5/GO-2023-2102.json
@@ -146,6 +146,60 @@
         },
         {
           "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/"
+        },
+        {
+          "url": "https://security.netapp.com/advisory/ntap-20231110-0008/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/"
+        },
+        {
+          "url": "https://security.gentoo.org/glsa/202311-09"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/"
+        },
+        {
+          "url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/"
         }
       ]
     }

diff --git a/data/reports/GO-2022-1037.yaml b/data/reports/GO-2022-1037.yaml
@@ -31,3 +31,5 @@ references:
 cve_metadata:
     id: CVE-2022-2879
     cwe: 'CWE 400: Uncontrolled Resource Consumption'
+    references:
+        - https://security.gentoo.org/glsa/202311-09
diff --git a/data/reports/GO-2022-1038.yaml b/data/reports/GO-2022-1038.yaml
@@ -32,3 +32,5 @@ references:
 cve_metadata:
     id: CVE-2022-2880
     cwe: 'CWE-444: Inconsistent Interpretation of HTTP Requests'
+    references:
+        - https://security.gentoo.org/glsa/202311-09
diff --git a/data/reports/GO-2022-1039.yaml b/data/reports/GO-2022-1039.yaml
@@ -37,3 +37,5 @@ references:
 cve_metadata:
     id: CVE-2022-41715
     cwe: 'CWE 400: Uncontrolled Resource Consumption'
+    references:
+        - https://security.gentoo.org/glsa/202311-09
diff --git a/data/reports/GO-2022-1144.yaml b/data/reports/GO-2022-1144.yaml
@@ -61,3 +61,8 @@ cve_metadata:
         - https://lists.fedoraproject.org/archives/list/[email protected]/message/56B2FFESRYYP6IY2AZ3UWXLWKZ5IYZN4/
         - https://lists.fedoraproject.org/archives/list/[email protected]/message/ANIOPUXWIHVRA6CEWXCGOMX3YYS6KFHG/
         - https://lists.fedoraproject.org/archives/list/[email protected]/message/WPEIZ7AMEJCZXU3FEJZMVRNHQZXX5P3I/
+        - https://lists.fedoraproject.org/archives/list/[email protected]/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/
+        - https://lists.fedoraproject.org/archives/list/[email protected]/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/
+        - https://lists.fedoraproject.org/archives/list/[email protected]/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/
+        - https://security.gentoo.org/glsa/202311-09
+        - https://lists.fedoraproject.org/archives/list/[email protected]/message/CSVIS6MTMFVBA7JPMRAUNKUOYEVSJYSB/
diff --git a/data/reports/GO-2023-1569.yaml b/data/reports/GO-2023-1569.yaml
@@ -57,3 +57,5 @@ references:
 cve_metadata:
     id: CVE-2022-41725
     cwe: 'CWE-400: Uncontrolled Resource Consumption'
+    references:
+        - https://security.gentoo.org/glsa/202311-09
diff --git a/data/reports/GO-2023-1570.yaml b/data/reports/GO-2023-1570.yaml
@@ -99,3 +99,5 @@ references:
 cve_metadata:
     id: CVE-2022-41724
     cwe: 'CWE-400: Uncontrolled Resource Consumption'
+    references:
+        - https://security.gentoo.org/glsa/202311-09
diff --git a/data/reports/GO-2023-1571.yaml b/data/reports/GO-2023-1571.yaml
@@ -136,3 +136,7 @@ cve_metadata:
         - https://lists.fedoraproject.org/archives/list/[email protected]/message/RGW7GE2Z32ZT47UFAQFDRQE33B7Q7LMT/
         - https://lists.fedoraproject.org/archives/list/[email protected]/message/XX3IMUTZKRQ73PBZM4E2JP4BKYH4C6XE/
         - https://www.couchbase.com/alerts/
+        - https://lists.fedoraproject.org/archives/list/[email protected]/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/
+        - https://lists.fedoraproject.org/archives/list/[email protected]/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/
+        - https://lists.fedoraproject.org/archives/list/[email protected]/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/
+        - https://security.gentoo.org/glsa/202311-09
diff --git a/data/reports/GO-2023-1702.yaml b/data/reports/GO-2023-1702.yaml
@@ -26,3 +26,5 @@ references:
 cve_metadata:
     id: CVE-2023-24537
     cwe: 'CWE-835: Loop with Unreachable Exit Condition (''Infinite Loop'')'
+    references:
+        - https://security.gentoo.org/glsa/202311-09
diff --git a/data/reports/GO-2023-1703.yaml b/data/reports/GO-2023-1703.yaml
@@ -46,3 +46,5 @@ references:
 cve_metadata:
     id: CVE-2023-24538
     cwe: 'CWE-94: Improper Control of Generation of Code (''Code Injection'')'
+    references:
+        - https://security.gentoo.org/glsa/202311-09
diff --git a/data/reports/GO-2023-1704.yaml b/data/reports/GO-2023-1704.yaml
@@ -37,3 +37,4 @@ cve_metadata:
     cwe: 'CWE-400: Uncontrolled Resource Consumption'
     references:
         - https://security.netapp.com/advisory/ntap-20230526-0007/
+        - https://security.gentoo.org/glsa/202311-09
diff --git a/data/reports/GO-2023-1705.yaml b/data/reports/GO-2023-1705.yaml
@@ -71,3 +71,4 @@ cve_metadata:
     cwe: 'CWE-400: Uncontrolled Resource Consumption'
     references:
         - https://security.netapp.com/advisory/ntap-20230526-0007/
+        - https://security.gentoo.org/glsa/202311-09
diff --git a/data/reports/GO-2023-1839.yaml b/data/reports/GO-2023-1839.yaml
@@ -29,3 +29,4 @@ cve_metadata:
     references:
         - https://lists.fedoraproject.org/archives/list/[email protected]/message/XBS3IIK6ADV24C5ULQU55QLT2UE762ZX/
         - https://lists.fedoraproject.org/archives/list/[email protected]/message/NZ2O6YCO2IZMZJELQGZYR2WAUNEDLYV6/
+        - https://security.gentoo.org/glsa/202311-09
diff --git a/data/reports/GO-2023-1840.yaml b/data/reports/GO-2023-1840.yaml
@@ -31,3 +31,4 @@ cve_metadata:
     references:
         - https://lists.fedoraproject.org/archives/list/[email protected]/message/XBS3IIK6ADV24C5ULQU55QLT2UE762ZX/
         - https://lists.fedoraproject.org/archives/list/[email protected]/message/NZ2O6YCO2IZMZJELQGZYR2WAUNEDLYV6/
+        - https://security.gentoo.org/glsa/202311-09
diff --git a/data/reports/GO-2023-1841.yaml b/data/reports/GO-2023-1841.yaml
@@ -30,3 +30,4 @@ cve_metadata:
     references:
         - https://lists.fedoraproject.org/archives/list/[email protected]/message/XBS3IIK6ADV24C5ULQU55QLT2UE762ZX/
         - https://lists.fedoraproject.org/archives/list/[email protected]/message/NZ2O6YCO2IZMZJELQGZYR2WAUNEDLYV6/
+        - https://security.gentoo.org/glsa/202311-09
-Original file line number
+Diff line change
@@ Expand Up / @@ -78,6 +78,9 @@ @@
             },
             {
               "url": "https://pkg.go.dev/vuln/GO-2022-1037"
+            },
+            {
+              "url": "https://security.gentoo.org/glsa/202311-09"
             }
           ],
           "credits": [
@@ Expand Down @@