From 8c93ba55596788ca2866ab97200e1415bb26c03c Mon Sep 17 00:00:00 2001
From: NeilHanlon <NeilHanlon@users.noreply.github.com>
Date: Fri, 6 Jan 2023 13:05:40 +0000
Subject: [PATCH] deploy: 8ccce7fd31973e438889a894e0b29e70f8459500

---
 index.html          | 5 +++--
 trivy-results.sarif | 2 +-
 2 files changed, 4 insertions(+), 3 deletions(-)
diff --git a/index.html b/index.html
index 49bcb7b..3aa65e0 100644
--- a/index.html
+++ b/index.html
@@ -51,7 +51,7 @@
       }
       a.toggle-more-links { cursor: pointer; }
     </style>
-    <title>docker.io/rockylinux/rockylinux:8 (rocky 8.7) - Trivy Report - 2023-01-04 13:05:58.983808723 +0000 UTC m=+1.065410995 </title>
+    <title>docker.io/rockylinux/rockylinux:8 (rocky 8.7) - Trivy Report - 2023-01-06 13:05:39.249913015 +0000 UTC m=+1.190615677 </title>
     <script>
       window.onload = function() {
         document.querySelectorAll('td.links').forEach(function(linkCell) {
@@ -81,7 +81,7 @@
     </script>
   </head>
   <body>
-    <h1>docker.io/rockylinux/rockylinux:8 (rocky 8.7) - Trivy Report - 2023-01-04 13:05:58.983832523 +0000 UTC m=+1.065434895</h1>
+    <h1>docker.io/rockylinux/rockylinux:8 (rocky 8.7) - Trivy Report - 2023-01-06 13:05:39.249936814 +0000 UTC m=+1.190639576</h1>
     <table>
       <tr class="group-header"><th colspan="6">rocky</th></tr>
       <tr><th colspan="6">No Vulnerabilities found</th></tr>
@@ -102,6 +102,7 @@
         <td class="pkg-version">39.2.0</td>
         <td>65.5.1</td>
         <td class="links" data-more-links="off">
+          <a href="https://access.redhat.com/security/cve/CVE-2022-40897">https://access.redhat.com/security/cve/CVE-2022-40897</a>
           <a href="https://github.com/advisories/GHSA-r9hx-vwmv-q579">https://github.com/advisories/GHSA-r9hx-vwmv-q579</a>
           <a href="https://github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200">https://github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200</a>
           <a href="https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be">https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be</a>
diff --git a/trivy-results.sarif b/trivy-results.sarif
index 52a32d5..77db716 100644
--- a/trivy-results.sarif
+++ b/trivy-results.sarif
@@ -13,7 +13,7 @@
               "id": "CVE-2022-40897",
               "name": "LanguageSpecificPackageVulnerability",
               "shortDescription": {
-                "text": "CVE-2022-40897 affecting package python-setuptools 40.2.0-6"
+                "text": "pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py"
               },
               "fullDescription": {
                 "text": "Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py."

rocky
No Vulnerabilities found
39.2.0	65.5.1	+ https://access.redhat.com/security/cve/CVE-2022-40897 https://github.com/advisories/GHSA-r9hx-vwmv-q579 https://github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200 https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be diff --git a/trivy-results.sarif b/trivy-results.sarif index 52a32d5..77db716 100644 --- a/trivy-results.sarif +++ b/trivy-results.sarif @@ -13,7 +13,7 @@ "id": "CVE-2022-40897", "name": "LanguageSpecificPackageVulnerability", "shortDescription": { - "text": "CVE-2022-40897 affecting package python-setuptools 40.2.0-6" + "text": "pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py" }, "fullDescription": { "text": "Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py."