summaryrefslogtreecommitdiffstats
path: root/bin/report-vuln
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2017-04-01 19:27:02 +0000
committerSalvatore Bonaccorso <carnil@debian.org>2017-04-01 19:27:02 +0000
commit087f3586c5e05e6f2a633f99b78fa6619f15e85b (patch)
treecef84f9881b47afce9241b622e5e9fb9b93b3b5e /bin/report-vuln
parent66df3dcba80401ea61a219101353b110409de702 (diff)
report-vuln: support reporting against source package
git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@50252 e39458fd-73e7-0310-bf30-c45bca0a0e42
Diffstat (limited to 'bin/report-vuln')
-rwxr-xr-xbin/report-vuln11
1 files changed, 8 insertions, 3 deletions
diff --git a/bin/report-vuln b/bin/report-vuln
index f0b73fc901..efe6e367d6 100755
--- a/bin/report-vuln
+++ b/bin/report-vuln
@@ -113,7 +113,7 @@ def get_cve(id):
return ret + '\n'
-def gen_text(pkg, cveid, blanks=False, severity=None, affected=None, cc=False, cclist=None):
+def gen_text(pkg, cveid, blanks=False, severity=None, affected=None, cc=False, cclist=None, src=False):
vuln_suff = 'y'
cve_suff = ''
time_w = 'was'
@@ -124,7 +124,11 @@ def gen_text(pkg, cveid, blanks=False, severity=None, affected=None, cc=False, c
vuln_suff = 'ies'
time_w = 'were'
- header = '''Package: %s\n''' % (pkg)
+ if src:
+ header = '''Source: %s\n''' % (pkg)
+ else:
+ header = '''Package: %s\n''' % (pkg)
+
if affected is None:
if blanks:
header += "Version: FILLINAFFECTEDVERSION\n"
@@ -207,6 +211,7 @@ def main():
help='add X-Debbugs-CC header to')
parser.add_argument('--cc-list', dest='cclist', default=['team@security.debian.org', 'secure-testing-team@lists.alioth.debian.org'],
help='list of addresses to add in CC (default: %(default)s)')
+ parser.add_argument('--src', action="store_true", help='report against source package')
parser.add_argument('pkg', help='affected package')
parser.add_argument('cve', nargs='+', help='relevant CVE for this source package, may be used multiple time if the issue has multiple CVEs')
args = parser.parse_args()
@@ -226,7 +231,7 @@ def main():
if not c.match(arg) and not temp_id.match(arg):
error(arg + ' does not seem to be a valid CVE id')
- gen_text(pkg, cve, affected=args.affected, blanks=args.blanks, severity=args.severity, cc=args.cc, cclist=args.cclist)
+ gen_text(pkg, cve, affected=args.affected, blanks=args.blanks, severity=args.severity, cc=args.cc, cclist=args.cclist, src=args.src)
if __name__ == '__main__':
main()

© 2014-2024 Faster IT GmbH | imprint | privacy policy