data/reports: review GO-2024-3169

  - data/reports/GO-2024-3169.yaml

Fixes #3169

Change-Id: I70b782a8d783db91bc154f1c60274bc4242da425
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/635416
Reviewed-by: Zvonimir Pavlinovic <[email protected]>
LUCI-TryBot-Result: Go LUCI <[email protected]>

Author: tatianab

data/osv/GO-2024-3169.json

@@ -21,6 +21,9 @@
           "events": [
             {
               "introduced": "0"
+            },
+            {
+              "fixed": "1.37.4"
             }
           ]
         }
@@ -106,6 +109,9 @@
           "events": [
             {
               "introduced": "0"
+            },
+            {
+              "fixed": "5.2.4"
             }
           ]
         }
@@ -119,20 +125,16 @@
       "url": "https://github.com/advisories/GHSA-fhqq-8f65-5xfc"
     },
     {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9407"
-    },
-    {
-      "type": "WEB",
-      "url": "https://access.redhat.com/security/cve/CVE-2024-9407"
+      "type": "FIX",
+      "url": "https://github.com/containers/buildah/commit/e4e2ad5ca2088d7c388109394135ead7aaf1f4f4"
     },
     {
       "type": "WEB",
-      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2315887"
+      "url": "https://github.com/containers/podman/releases/tag/v5.2.4"
     }
   ],
   "database_specific": {
     "url": "https://pkg.go.dev/vuln/GO-2024-3169",
-    "review_status": "UNREVIEWED"
+    "review_status": "REVIEWED"
   }
 }

data/reports/GO-2024-3169.yaml

@@ -1,9 +1,9 @@
 id: GO-2024-3169
 modules:
     - module: github.com/containers/buildah
-      unsupported_versions:
-        - last_affected: 1.37.3
-      vulnerable_at: 1.37.4
+      versions:
+        - fixed: 1.37.4
+      vulnerable_at: 1.37.3
     - module: github.com/containers/podman
       vulnerable_at: 1.9.3
     - module: github.com/containers/podman/v2
@@ -13,20 +13,19 @@ modules:
     - module: github.com/containers/podman/v4
       vulnerable_at: 4.9.5
     - module: github.com/containers/podman/v5
-      unsupported_versions:
-        - last_affected: 5.2.3
-      vulnerable_at: 5.2.4
+      versions:
+        - fixed: 5.2.4
+      vulnerable_at: 5.2.3
 summary: Improper Input Validation in Buildah and Podman in github.com/containers/buildah
 cves:
     - CVE-2024-9407
 ghsas:
     - GHSA-fhqq-8f65-5xfc
 references:
     - advisory: https://github.com/advisories/GHSA-fhqq-8f65-5xfc
-    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-9407
-    - web: https://access.redhat.com/security/cve/CVE-2024-9407
-    - web: https://bugzilla.redhat.com/show_bug.cgi?id=2315887
+    - fix: https://github.com/containers/buildah/commit/e4e2ad5ca2088d7c388109394135ead7aaf1f4f4
+    - web: https://github.com/containers/podman/releases/tag/v5.2.4
 source:
     id: GHSA-fhqq-8f65-5xfc
-    created: 2024-10-08T10:57:52.867555-04:00
-review_status: UNREVIEWED
+    created: 2024-12-11T15:38:28.529084-05:00
+review_status: REVIEWED