An alternative triage script that works if the json sync is not working.

1 files changed, 38 insertions, 0 deletions

diff --git a/bin/lts-alt-cve-triage.sh b/bin/lts-alt-cve-triage.sh
new file mode 100755
index 0000000000..520be3d621
--- /dev/null
+++ b/bin/lts-alt-cve-triage.sh
@@ -0,0 +1,38 @@
+#!/bin/sh
+# Requires:
+# wget, html2text
+
+WDB="https://deb.freexian.com/extended-lts/tracker/status/release/oldstable"
+ENF="data/dla-needed.txt"
+OPF=$(tempfile)
+
+echo "Fetching tracker db from $WDB"
+wget -O "$OPF" -q "$WDB"
+html2text "$OPF" | grep "?$" | while read A B O ; do
+    if echo $A | grep -q -E "^(CVE|TEMP)-" ; then
+	CVE=$A
+    else
+	PACKAGE=$A
+	CVE=$B
+    fi
+
+    # Sanitize package name for e.g. foo_(non-free)
+    PACKAGE=${PACKAGE%%_*}
+
+    if echo "$PACKAGE" | grep -q '^[-a-zA-Z0-9_][-a-zA-Z0-9_.]*$' ; then
+	if [ -n "$CVE" ] ; then
+	    if grep -q "^$PACKAGE[[:space:]](" $ENF ; then
+		echo "Supported $PACKAGE $CVE (Claimed)"
+	    elif grep -q "^$PACKAGE$" $ENF ; then
+		echo "Supported $PACKAGE $CVE (Not claimed)"
+	    else
+		echo "Supported $PACKAGE $CVE (Triage needed)"
+	    fi
+	else
+	    echo "Empty CVE for $PACKAGE"
+	fi
+    else
+	echo "Unknown characters in package name $PACKAGE."
+    fi
+done
+rm -f "$OPF"