all: publish non_go_versions as custom_ranges in OSV

Change-Id: I737910df80c37a6027b08916abe3b3f413795bbe Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/597155 LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com> Reviewed-by: Damien Neil <dneil@google.com>
golang · Jul 9, 2024 · f272f63 · f272f63
1 parent 7313605
commit f272f63
Show file tree

Hide file tree

Showing 99 changed files with 1,918 additions and 109 deletions.
diff --git a/cmd/vulnreport/fix.go b/cmd/vulnreport/fix.go
@@ -178,7 +178,7 @@ func (r *yamlReport) checkSymbols() error {
  // If some symbol is in the std library at a different version,
  // we may derive the wrong symbols for this package and other.
  // In this case, skip updating DerivedSymbols.
- ranges, err := report.AffectedRanges(m.Versions)
+ ranges, err := m.Versions.ToSemverRanges()
  if err != nil {
  return err
  }

diff --git a/data/osv/GO-2024-2428.json b/data/osv/GO-2024-2428.json
@@ -25,7 +25,21 @@
  ]
  }
  ],
- "ecosystem_specific": {}
+ "ecosystem_specific": {
+ "custom_ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "1.9.0"
+ }
+ ]
+ }
+ ]
+ }
  }
  ],
  "references": [

diff --git a/data/osv/GO-2024-2430.json b/data/osv/GO-2024-2430.json
@@ -25,7 +25,21 @@
  ]
  }
  ],
- "ecosystem_specific": {}
+ "ecosystem_specific": {
+ "custom_ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "3.3.1"
+ }
+ ]
+ }
+ ]
+ }
  }
  ],
  "references": [

diff --git a/data/osv/GO-2024-2431.json b/data/osv/GO-2024-2431.json
@@ -25,7 +25,21 @@
  ]
  }
  ],
- "ecosystem_specific": {}
+ "ecosystem_specific": {
+ "custom_ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "3.3.1"
+ }
+ ]
+ }
+ ]
+ }
  }
  ],
  "references": [

diff --git a/data/osv/GO-2024-2432.json b/data/osv/GO-2024-2432.json
@@ -25,7 +25,21 @@
  ]
  }
  ],
- "ecosystem_specific": {}
+ "ecosystem_specific": {
+ "custom_ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "3.3.1"
+ }
+ ]
+ }
+ ]
+ }
  }
  ],
  "references": [

diff --git a/data/osv/GO-2024-2433.json b/data/osv/GO-2024-2433.json
@@ -25,7 +25,21 @@
  ]
  }
  ],
- "ecosystem_specific": {}
+ "ecosystem_specific": {
+ "custom_ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "3.3.1"
+ }
+ ]
+ }
+ ]
+ }
  }
  ],
  "references": [

diff --git a/data/osv/GO-2024-2434.json b/data/osv/GO-2024-2434.json
@@ -25,7 +25,21 @@
  ]
  }
  ],
- "ecosystem_specific": {}
+ "ecosystem_specific": {
+ "custom_ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "3.3.1"
+ }
+ ]
+ }
+ ]
+ }
  }
  ],
  "references": [

diff --git a/data/osv/GO-2024-2442.json b/data/osv/GO-2024-2442.json
@@ -24,7 +24,27 @@
  ]
  }
  ],
- "ecosystem_specific": {}
+ "ecosystem_specific": {
+ "custom_ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "13.0.0"
+ },
+ {
+ "fixed": "13.4.13"
+ },
+ {
+ "introduced": "14.0.0"
+ },
+ {
+ "fixed": "14.2.4"
+ }
+ ]
+ }
+ ]
+ }
  }
  ],
  "references": [

diff --git a/data/osv/GO-2024-2444.json b/data/osv/GO-2024-2444.json
@@ -76,7 +76,21 @@
  ]
  }
  ],
- "ecosystem_specific": {}
+ "ecosystem_specific": {
+ "custom_ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "8.1.7"
+ }
+ ]
+ }
+ ]
+ }
  }
  ],
  "references": [

diff --git a/data/osv/GO-2024-2445.json b/data/osv/GO-2024-2445.json
@@ -24,7 +24,33 @@
  ]
  }
  ],
- "ecosystem_specific": {}
+ "ecosystem_specific": {
+ "custom_ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "12.4.31"
+ },
+ {
+ "introduced": "13.0.0"
+ },
+ {
+ "fixed": "13.4.13"
+ },
+ {
+ "introduced": "14.0.0"
+ },
+ {
+ "fixed": "14.2.4"
+ }
+ ]
+ }
+ ]
+ }
  }
  ],
  "references": [

diff --git a/data/osv/GO-2024-2446.json b/data/osv/GO-2024-2446.json
@@ -76,7 +76,21 @@
  ]
  }
  ],
- "ecosystem_specific": {}
+ "ecosystem_specific": {
+ "custom_ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "8.1.7"
+ }
+ ]
+ }
+ ]
+ }
  }
  ],
  "references": [

diff --git a/data/osv/GO-2024-2447.json b/data/osv/GO-2024-2447.json
@@ -24,7 +24,33 @@
  ]
  }
  ],
- "ecosystem_specific": {}
+ "ecosystem_specific": {
+ "custom_ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "12.4.31"
+ },
+ {
+ "introduced": "13.0.0"
+ },
+ {
+ "fixed": "13.4.13"
+ },
+ {
+ "introduced": "14.0.0"
+ },
+ {
+ "fixed": "14.2.4"
+ }
+ ]
+ }
+ ]
+ }
  }
  ],
  "references": [

diff --git a/data/osv/GO-2024-2448.json b/data/osv/GO-2024-2448.json
@@ -79,7 +79,21 @@
  ]
  }
  ],
- "ecosystem_specific": {}
+ "ecosystem_specific": {
+ "custom_ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "8.1.7"
+ }
+ ]
+ }
+ ]
+ }
  }
  ],
  "references": [

diff --git a/data/osv/GO-2024-2449.json b/data/osv/GO-2024-2449.json
@@ -24,7 +24,33 @@
  ]
  }
  ],
- "ecosystem_specific": {}
+ "ecosystem_specific": {
+ "custom_ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "12.4.31"
+ },
+ {
+ "introduced": "13.0.0"
+ },
+ {
+ "fixed": "13.4.13"
+ },
+ {
+ "introduced": "14.0.0"
+ },
+ {
+ "fixed": "14.2.4"
+ }
+ ]
+ }
+ ]
+ }
  }
  ],
  "references": [

diff --git a/data/osv/GO-2024-2450.json b/data/osv/GO-2024-2450.json
@@ -25,7 +25,21 @@
  ]
  }
  ],
- "ecosystem_specific": {}
+ "ecosystem_specific": {
+ "custom_ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "7.8.10"
+ }
+ ]
+ }
+ ]
+ }
  },
  {
  "package": {
@@ -76,7 +90,21 @@
  ]
  }
  ],
- "ecosystem_specific": {}
+ "ecosystem_specific": {
+ "custom_ranges": [
+ {
+ "type": "ECOSYSTEM",
+ "events": [
+ {
+ "introduced": "0"
+ },
+ {
+ "fixed": "8.1.1"
+ }
+ ]
+ }
+ ]
+ }
  }
  ],
  "references": [