Alpine version enumeration (#769)

- Enumerate alpine versions. - Some refactoring of ecosystems.py to better follow python conventions - Some minor improvements to typing - Add in univers library for alpine version comparison.
google · Oct 13, 2022 · 6e2c427 · 6e2c427
1 parent c8b56e1
commit 6e2c427
Show file tree

Hide file tree

Showing 15 changed files with 1,535 additions and 53 deletions.
diff --git a/docker/worker/.gitignore b/docker/worker/.gitignore
@@ -1,2 +1,3 @@
 utils/
-lib/
+lib/
+testdata/tmp
diff --git a/docker/worker/testdata/CVE-2022-27449.json b/docker/worker/testdata/CVE-2022-27449.json
@@ -0,0 +1,127 @@
+{
+  "id": "CVE-2022-27449",
+  "details": "MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148.",
+  "affected": [
+    {
+      "package": {
+        "name": "mariadb",
+        "ecosystem": "Alpine:v3.12",
+        "purl": "pkg:alpine/mariadb"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "10.4.25-r0"
+            }
+          ]
+        }
+      ],
+      "versions": null
+    },
+    {
+      "package": {
+        "name": "mariadb",
+        "ecosystem": "Alpine:v3.13",
+        "purl": "pkg:alpine/mariadb"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "10.5.16-r0"
+            }
+          ]
+        }
+      ],
+      "versions": null
+    },
+    {
+      "package": {
+        "name": "mariadb",
+        "ecosystem": "Alpine:v3.14",
+        "purl": "pkg:alpine/mariadb"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "10.5.16-r0"
+            }
+          ]
+        }
+      ],
+      "versions": null
+    },
+    {
+      "package": {
+        "name": "mariadb",
+        "ecosystem": "Alpine:v3.15",
+        "purl": "pkg:alpine/mariadb"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "10.6.8-r0"
+            }
+          ]
+        }
+      ],
+      "versions": null
+    },
+    {
+      "package": {
+        "name": "mariadb",
+        "ecosystem": "Alpine:v3.16",
+        "purl": "pkg:alpine/mariadb"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "10.6.8-r0"
+            }
+          ]
+        }
+      ],
+      "versions": null
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://jira.mariadb.org/browse/MDEV-28089"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://security.netapp.com/advisory/ntap-20220526-0006/"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
+    }
+  ],
+  "modified": "2022-10-07T18:59:00Z",
+  "published": "2022-04-14T13:15:00Z"
+}