notus-scanner icon indicating copy to clipboard operation
notus-scanner copied to clipboard

Add: version ranges

Open Kraemii opened this issue 2 years ago • 1 comments

Now it is possible to set a range for versions within a package is vulnerable

E.g.:

{
    "version": "1.0",
    "package_type": "deb",
    "product_name": "Test OS",
    "advisories": [
        {
            "oid": "1.3.6.1.4.1.25623.1.1.7.2.2023.0988598199100",
            "fixed_packages": [
                {
                    "name": "grafana",
                    "full_version": "8.5.24",
                    "specifier": ">="
                },
                {
                    "range": [
                        {
                            "name": "grafana",
                            "full_version": "9.0.0",
                            "specifier": "<"
                        },
                        {
                            "name": "grafana",
                            "full_version": "9.2.17",
                            "specifier": ">="
                        }
                    ]
                },
                {
                    "range": [
                        {
                            "name": "grafana",
                            "full_version": "9.3.0",
                            "specifier": "<"
                        },
                        {
                            "name": "grafana",
                            "full_version": "9.3.13",
                            "specifier": ">="
                        }
                    ]
                }
            ]
        }
    ]
}

SC-894

Kraemii avatar Jul 26 '23 12:07 Kraemii

@Kraemii close?

y0urself avatar Jan 26 '24 11:01 y0urself