Skip to content

Backfill fixed versions for old CVE patches - #25

Merged
Bo98 merged 1 commit into
mainfrom
cve-backdate
Jul 27, 2026
Merged

Backfill fixed versions for old CVE patches#25
Bo98 merged 1 commit into
mainfrom
cve-backdate

Conversation

@Bo98

@Bo98 Bo98 commented Jul 27, 2026

Copy link
Copy Markdown
Member

Now that we have Homebrew/brew#23112, we can correct the fixed version for older CVEs we annotated later.

I manually checked everything here by looking through git blame and reading each commit diff.

Copilot AI review requested due to automatic review settings July 27, 2026 15:01

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR backfills the affected[].ranges[].events[].fixed version boundaries for older patch-based Homebrew advisories, aligning the advisory metadata with the earliest formula revisions that actually contained the relevant CVE fixes (per the referenced Homebrew/brew changes).

Changes:

  • Adjust fixed versions for several unzip CVE advisories from 6.0_8 to earlier 6.0_* revisions.
  • Adjust fixed version for nvi CVE-2015-2305 from 1.81.6_6 to 1.81.6_3.
  • Adjust fixed versions for multiple libquicktime advisories from 1.2.4_5 to 1.2.4_4, and CVE-2016-2399 to 1.2.4_3.

Reviewed changes

Copilot reviewed 19 out of 19 changed files in this pull request and generated 19 comments.

Show a summary per file
File Description
advisories/BREW-unzip-CVE-2019-13232.json Backfill fixed boundary for unzip CVE-2019-13232 to an earlier revision.
advisories/BREW-unzip-CVE-2018-1000035.json Backfill fixed boundary for unzip CVE-2018-1000035 to an earlier revision.
advisories/BREW-unzip-CVE-2016-9844.json Backfill fixed boundary for unzip CVE-2016-9844 to an earlier revision.
advisories/BREW-unzip-CVE-2015-7697.json Backfill fixed boundary for unzip CVE-2015-7697 to an earlier revision.
advisories/BREW-unzip-CVE-2015-7696.json Backfill fixed boundary for unzip CVE-2015-7696 to an earlier revision.
advisories/BREW-unzip-CVE-2014-9913.json Backfill fixed boundary for unzip CVE-2014-9913 to an earlier revision.
advisories/BREW-unzip-CVE-2014-9636.json Backfill fixed boundary for unzip CVE-2014-9636 to an earlier revision.
advisories/BREW-unzip-CVE-2014-8141.json Backfill fixed boundary for unzip CVE-2014-8141 to an earlier revision.
advisories/BREW-unzip-CVE-2014-8140.json Backfill fixed boundary for unzip CVE-2014-8140 to an earlier revision.
advisories/BREW-unzip-CVE-2014-8139.json Backfill fixed boundary for unzip CVE-2014-8139 to an earlier revision.
advisories/BREW-nvi-CVE-2015-2305.json Backfill fixed boundary for nvi CVE-2015-2305 to an earlier revision.
advisories/BREW-libquicktime-CVE-2017-9128.json Backfill fixed boundary for libquicktime CVE-2017-9128 to an earlier revision.
advisories/BREW-libquicktime-CVE-2017-9127.json Backfill fixed boundary for libquicktime CVE-2017-9127 to an earlier revision.
advisories/BREW-libquicktime-CVE-2017-9126.json Backfill fixed boundary for libquicktime CVE-2017-9126 to an earlier revision.
advisories/BREW-libquicktime-CVE-2017-9125.json Backfill fixed boundary for libquicktime CVE-2017-9125 to an earlier revision.
advisories/BREW-libquicktime-CVE-2017-9124.json Backfill fixed boundary for libquicktime CVE-2017-9124 to an earlier revision.
advisories/BREW-libquicktime-CVE-2017-9123.json Backfill fixed boundary for libquicktime CVE-2017-9123 to an earlier revision.
advisories/BREW-libquicktime-CVE-2017-9122.json Backfill fixed boundary for libquicktime CVE-2017-9122 to an earlier revision.
advisories/BREW-libquicktime-CVE-2016-2399.json Backfill fixed boundary for libquicktime CVE-2016-2399 to an earlier revision.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread advisories/BREW-unzip-CVE-2019-13232.json
Comment thread advisories/BREW-unzip-CVE-2018-1000035.json
Comment thread advisories/BREW-unzip-CVE-2016-9844.json
Comment thread advisories/BREW-unzip-CVE-2015-7697.json
Comment thread advisories/BREW-unzip-CVE-2015-7696.json
Comment thread advisories/BREW-libquicktime-CVE-2017-9125.json
Comment thread advisories/BREW-libquicktime-CVE-2017-9124.json
Comment thread advisories/BREW-libquicktime-CVE-2017-9123.json
Comment thread advisories/BREW-libquicktime-CVE-2017-9122.json
Comment thread advisories/BREW-libquicktime-CVE-2016-2399.json
@Bo98
Bo98 merged commit 5d27c40 into main Jul 27, 2026
5 checks passed
@Bo98
Bo98 deleted the cve-backdate branch July 27, 2026 16:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants