Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[GHSA sync] handled related IDs #400

Open
reedloden opened this issue Jul 6, 2019 · 2 comments
Open

[GHSA sync] handled related IDs #400

reedloden opened this issue Jul 6, 2019 · 2 comments
Assignees
@reedloden
Labels
enhancement

Comments

@reedloden
Copy link
Member

Sometimes we have multiple IDs combined together into one advisory.

One example of this is gems/bootstrap/CVE-2018-14040.yml. The GHSA sync script doesn't understand that CVE-2018-14042 is part of this same advisory.
@reedloden
Copy link
Member Author

@rschultheis ^^

@reedloden reedloden mentioned this issue Jun 22, 2021
Merged
@jasnow jasnow mentioned this issue Jun 17, 2023
Merged
@jasnow
Copy link
Contributor

jasnow commented Jun 17, 2023

The idea behind this issue is for the GHSA sync script to combine multiple GHSA advisories into one (fewer) ruby-advisory-db advisories and use related:/cvs: field and related:/ghsa: field because they are the "same" advisory.

jasnow added a commit to jasnow/ruby-advisory-db that referenced this issue Jul 1, 2023
@jasnow
Added related:/cve: in support of rubysec#400
133f6e6
@jasnow jasnow mentioned this issue Jul 1, 2023
Merged
postmodern pushed a commit that referenced this issue Jul 1, 2023
@jasnow @postmodern
Added related:/cve: in support of #400
35b20e3
@jasnow jasnow mentioned this issue Jul 2, 2023
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@reedloden reedloden

Labels
enhancement
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@postmodern @jasnow @reedloden