Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add advisories for OpenCV and CVE-2023-4863 #161

Merged
merged 1 commit into from
Sep 29, 2023
Merged

Add advisories for OpenCV and CVE-2023-4863 #161

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
23 changes: 23 additions & 0 deletions vulns/opencv-contrib-python-headless/PYSEC-0000-CVE-2023-4863.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
id: PYSEC-0000-CVE-2023-4863
details: opencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are
vulnerable to CVE-2023-4863. opencv-contrib-python-headless v4.8.1.78 upgrades the bundled libwebp binary
to v1.3.2.
related:
- CVE-2023-4863
references:
- type: ADVISORY
url: https://nvd.nist.gov/vuln/detail/CVE-2023-4863
- type: ADVISORY
url: https://github.com/opencv/opencv/wiki/ChangeLog#version481
- type: FIX
url: https://github.com/opencv/opencv/pull/24274
affected:
- package:
name: opencv-contrib-python-headless
ecosystem: PyPI
purl: pkg:pypi/opencv-contrib-python-headless
ranges:
- type: ECOSYSTEM
events:
- introduced: '0'
- fixed: 4.8.1.78
23 changes: 23 additions & 0 deletions vulns/opencv-contrib-python/PYSEC-0000-CVE-2023-4863.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
id: PYSEC-0000-CVE-2023-4863
details: opencv-contrib-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are
vulnerable to CVE-2023-4863. opencv-contrib-python v4.8.1.78 upgrades the bundled libwebp binary
to v1.3.2.
related:
- CVE-2023-4863
references:
- type: ADVISORY
url: https://nvd.nist.gov/vuln/detail/CVE-2023-4863
- type: ADVISORY
url: https://github.com/opencv/opencv/wiki/ChangeLog#version481
- type: FIX
url: https://github.com/opencv/opencv/pull/24274
affected:
- package:
name: opencv-contrib-python
ecosystem: PyPI
purl: pkg:pypi/opencv-contrib-python
ranges:
- type: ECOSYSTEM
events:
- introduced: '0'
- fixed: 4.8.1.78
23 changes: 23 additions & 0 deletions vulns/opencv-python-headless/PYSEC-0000-CVE-2023-4863.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
id: PYSEC-0000-CVE-2023-4863
details: opencv-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are
vulnerable to CVE-2023-4863. opencv-python-headless v4.8.1.78 upgrades the bundled libwebp binary
to v1.3.2.
related:
- CVE-2023-4863
references:
- type: ADVISORY
url: https://nvd.nist.gov/vuln/detail/CVE-2023-4863
- type: ADVISORY
url: https://github.com/opencv/opencv/wiki/ChangeLog#version481
- type: FIX
url: https://github.com/opencv/opencv/pull/24274
affected:
- package:
name: opencv-python-headless
ecosystem: PyPI
purl: pkg:pypi/opencv-python-headless
ranges:
- type: ECOSYSTEM
events:
- introduced: '0'
- fixed: 4.8.1.78
23 changes: 23 additions & 0 deletions vulns/opencv-python/PYSEC-0000-CVE-2023-4863.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
id: PYSEC-0000-CVE-2023-4863
details: opencv-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are
vulnerable to CVE-2023-4863. opencv-python v4.8.1.78 upgrades the bundled libwebp binary
to v1.3.2.
related:
- CVE-2023-4863
references:
- type: ADVISORY
url: https://nvd.nist.gov/vuln/detail/CVE-2023-4863
- type: ADVISORY
url: https://github.com/opencv/opencv/wiki/ChangeLog#version481
- type: FIX
url: https://github.com/opencv/opencv/pull/24274
affected:
- package:
name: opencv-python
ecosystem: PyPI
purl: pkg:pypi/opencv-python
ranges:
- type: ECOSYSTEM
events:
- introduced: '0'
- fixed: 4.8.1.78