tests fixes and some product advisories tunes ups

2026-01-30 07:57:43 +02:00
parent 644887997c
commit 55744f6a39
345 changed files with 26290 additions and 2267 deletions
--- a/demos/binary-micro-witness/witnesses/openssl-cve-2024-0567.json
+++ b/demos/binary-micro-witness/witnesses/openssl-cve-2024-0567.json
@@ -0,0 +1,49 @@
+{
+  "schemaVersion": "1.0.0",
+  "binary": {
+    "digest": "sha256:a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2",
+    "purl": "pkg:deb/debian/openssl@3.0.11-1~deb12u2",
+    "arch": "linux-amd64",
+    "filename": "libssl.so.3"
+  },
+  "cve": {
+    "id": "CVE-2024-0567",
+    "advisory": "https://www.openssl.org/news/secadv/20240125.txt"
+  },
+  "verdict": "patched",
+  "confidence": 0.94,
+  "evidence": [
+    {
+      "function": "PKCS12_parse",
+      "state": "patched",
+      "score": 0.97,
+      "method": "semantic_ksg",
+      "hash": "sha256:f1e2d3c4"
+    },
+    {
+      "function": "PKCS12_verify_mac",
+      "state": "patched",
+      "score": 0.92,
+      "method": "semantic_ksg",
+      "hash": "sha256:a9b8c7d6"
+    },
+    {
+      "function": "SSL_CTX_new",
+      "state": "unchanged",
+      "score": 1.0,
+      "method": "byte_exact"
+    }
+  ],
+  "deltaSigDigest": "sha256:deadbeef1234567890abcdef1234567890abcdef1234567890abcdef12345678",
+  "sbomRef": {
+    "sbomDigest": "sha256:cafe1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab",
+    "purl": "pkg:deb/debian/openssl@3.0.11-1~deb12u2"
+  },
+  "tooling": {
+    "binaryIndexVersion": "2.1.0",
+    "lifter": "b2r2",
+    "matchAlgorithm": "semantic_ksg",
+    "normalizationRecipe": "stella-norm-v3"
+  },
+  "computedAt": "2026-01-28T12:00:00.000Z"
+}