HSEC-2024-0002: Add fixed versions

haskell · Mar 10, 2024 · cdde69f · cdde69f
1 parent bb76e72
commit cdde69f
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/advisories/hackage/bzlib/HSEC-2024-0002.md b/advisories/hackage/bzlib/HSEC-2024-0002.md
@@ -27,20 +27,23 @@ cvss = "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
 
 [[affected.versions]]
 introduced = "0.4"
+fixed = "0.5.2.0"
 
 [[affected]]
 package = "bz2"
 cvss = "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
 
 [[affected.versions]]
 introduced = "0.1.0.0"
+fixed = "1.0.1.1"
 
 [[affected]]
 package = "bzlib-conduit"
 cvss = "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
 
 [[affected.versions]]
 introduced = "0.1.0.0"
+fixed = "0.3.0.3"
 ```
 
 # out-of-bounds write when there are many bzip2 selectors