Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add SUDO Advisories #1825

Draft
wants to merge 3 commits into
base: main
Choose a base branch
from
Draft

Conversation

kunalsz
Copy link

@kunalsz kunalsz commented Mar 20, 2025

In reference to the issue #470

Changes made

  • Added a new pipeline for SUDO advisories

@kunalsz
Copy link
Author

kunalsz commented Mar 21, 2025

While testing the importer using the command ./manage.py import sudo_importer I get this error

ERROR 2025-03-20 19:10:25.104 Error while processing AdvisoryData(aliases=['CVE-2023-27320'], summary='A flaw exists in sudo’s per-command chroot feature that could result\nin the variable that stores the command being freed more than once.', affected_packages=[AffectedPackage(package=PackageURL(type='sudo', namespace=None, name='SUDO', version=None, qualifiers={}, subpath=None), affected_version_range=GenericVersionRange(constraints=(VersionConstraint(comparator='<=', version=SemverVersion(string='1.9.8')), VersionConstraint(comparator='>=', version=SemverVersion(string='1.9.13p1')))), fixed_version=SemverVersion(string='1.9.13p2'))], references=[Reference(reference_id='CVE-2023-27320', reference_type='', url='https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27320', severities=[])], date_published=datetime.datetime(2023, 2, 27, 8, 0, tzinfo=datetime.timezone.utc), weaknesses=[], url='https://www.sudo.ws/security/advisories/double_free/') with aliases ['CVE-2023-27320']: DataError('value too long for type character varying(32)\n')

@pombredanne @TG1999 @keshav-space

@kunalsz kunalsz changed the title Added SUDO Advisory Pipeline Add SUDO Advisories Mar 26, 2025
@pombredanne
Copy link
Member

Thanks. You are missing a DCO signoff.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants