Skip to content

Commit 909ef34

Browse files
committed
Update vulnerability whitelist to include new CVE in zlib exceptions
1 parent 2ab3180 commit 909ef34

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

.last-exported-commit

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
Last exported commit from parent repo: 7e86c3a08ceba201c906c5f28e28f3f87ccc4684
1+
Last exported commit from parent repo: c5579676c0a22df265d5072e1f16d25c2fa17463

vulnerability-whitelist.toml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -179,9 +179,9 @@ cve = ["CVE-2022-3064", "CVE-2021-4235", "CVE-2023-2251"]
179179
comment = "CVEs refer to other things called yaml, not this haskell package."
180180

181181
["zlib-0.6.3.0"]
182-
cve = ["CVE-2018-25032", "CVE-2022-37434", "CVE-2023-45853"]
182+
cve = ["CVE-2018-25032", "CVE-2022-37434", "CVE-2023-45853", "CVE-2023-6992"]
183183
comment = "Actual zlib dependency is already on a patched version; this version is a haskell library."
184184

185185
["zlib-1.2.12"]
186-
cve = ["CVE-2022-37434", "CVE-2023-45853"]
186+
cve = ["CVE-2022-37434", "CVE-2023-45853", "CVE-2023-6992"]
187187
comment = "We do not call the affected code with untrusted data."

0 commit comments

Comments
 (0)