summaryrefslogtreecommitdiffstats
path: root/lib
Commit message (Collapse)AuthorAgeFilesLines
* Don't hardcode architecture list in the MakefileEmilio Pozuelo Monfort2020-02-261-1/+5
| | | | Move it to config.json instead and grab it from there.
* security_db: don't hardcode release namesEmilio Pozuelo Monfort2020-02-261-1/+1
|
* debian_support: don't hardcode release namesEmilio Pozuelo Monfort2020-02-261-2/+3
|
* config: add a method to get all releasesEmilio Pozuelo Monfort2020-02-261-1/+8
|
* security_db: drop squeeze workaroundsEmilio Pozuelo Monfort2020-02-261-6/+0
|
* security_db: don't hardcode the testing suite codenameEmilio Pozuelo Monfort2020-02-261-8/+11
|
* dist_config.py: remove unused fileEmilio Pozuelo Monfort2020-02-261-97/+0
|
* security_db: remove unused getEffectiveVersion methodEmilio Pozuelo Monfort2020-02-261-54/+0
|
* security_db: don't hardcode release codenames in _initViewsEmilio Pozuelo Monfort2020-02-261-1/+5
|
* security_db: don't hardcode releases in db queriesEmilio Pozuelo Monfort2020-02-261-4/+10
|
* security_db: don't hardcode release codenames in calculateDebsecanEmilio Pozuelo Monfort2020-02-261-1/+1
|
* security_db: take the sid value in calculateDebsecan0Emilio Pozuelo Monfort2020-02-261-4/+2
| | | | | When the release is sid, just pass 'sid' rather than the empty string to change that afterwards.
* security_db: don't hardcode codenames in calls to gen_releaseEmilio Pozuelo Monfort2020-02-261-1/+1
|
* security_db: don't hardcode codenames in calls to _calcTesting()Emilio Pozuelo Monfort2020-02-261-4/+8
|
* config.py: add python module to read config.jsonEmilio Pozuelo Monfort2020-02-261-0/+52
|
* Merge branch 'bam/security-tracker-fix_cmp'Salvatore Bonaccorso2020-01-021-1/+2
|\ | | | | | | See merge request security-tracker-team/security-tracker!40
| * Fix list sortBrian May2019-06-171-1/+2
| |
* | Fix inconsistent leading ident before if statementBrian May2019-12-261-2/+2
| |
* | Reimplement (incompletely) simplistic NVD parser to handle JSON feedSalvatore Bonaccorso2019-10-201-68/+59
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The reimplementation is focused on only the functionality actually strictly required by the security-tracker. This includes fetching the CVE id and corresponding description. All of specific imapct metrics (severity, range, loss attributes) are not implemented. Those will require a database schema version bump and reimplementation as well for the security_db. Closes: #942670 Signed-off-by: Salvatore Bonaccorso <carnil@debian.org>
* | nvd.py: Add missing note that CVE description is returnedSalvatore Bonaccorso2019-10-201-0/+1
| |
* | Drop mips from bullseye architecturesSalvatore Bonaccorso2019-08-211-1/+1
| |
* | Another place where mips needs to be droppedRaphaël Hertzog2019-08-211-1/+1
| |
* | Don't track mips in sid, it's goneRaphaël Hertzog2019-08-211-1/+1
| | | | | | | | | | As announced in https://lists.debian.org/debian-mips/2019/07/msg00010.html it's now gone from the mirrors.
* | Disable fetching of backportsSalvatore Bonaccorso2019-07-071-1/+4
| | | | | | | | | | | | | | | | | | | | | | They ship Packages/Sources.gz only and backports is anyway not very good supported in tracker. Until #664866 is fixed backports will anyway not be tracked properly in security-tracker. Temporarily disable until downloadFile can handle multiple situations more gracefully.
* | Adjust dist directory on security archives for distributionSalvatore Bonaccorso2019-07-061-0/+8
| | | | | | | | | | | | | | | | | | | | Starting with bullseye the distribution/suite are switched to *-security instead of */updates for consistency through the Debian archives. See: https://lists.debian.org/debian-security/2019/06/msg00015.html for details and the intention to switch. Thanks: Ansgar Burchardt
* | lib/debian-releases.mk: Fetch backports suites for $(OLDSTABLE)Salvatore Bonaccorso2019-07-061-1/+1
| |
* | security_db: Update mappings after buster stable releaseSalvatore Bonaccorso2019-07-061-16/+16
| |
* | dist_config: Add support for bullseye release and initial list of supported ↵Salvatore Bonaccorso2019-07-061-0/+5
| | | | | | | | | | | | | | architectures Add list of currently suported architectures inherited from buster supported architectures.
* | debian_support: Add bullseye to supported releasesSalvatore Bonaccorso2019-07-061-1/+1
|/
* Remove hurd-i386, kfreebsd-{i386,amd64} from architectures in sidSalvatore Bonaccorso2019-05-011-1/+1
| | | | | | As announced in https://lists.debian.org/debian-devel/2019/04/msg00207.html hurd-i386 and kfreebsd-{i386,amd64} are going to be moved to debian-ports instead.
* security_db: Make source code comment independent of codename for distributionSalvatore Bonaccorso2019-04-281-2/+2
|
* lib/debian-releases.mk: Correctly remove $(OLDSTABLE) for backportsSalvatore Bonaccorso2019-03-261-1/+1
|
* Fetch packages files for backports suites only for $(STABLE)Salvatore Bonaccorso2019-03-261-2/+2
| | | | | | Current oldstable does not contains anymore the backports suites as it is the LTS release. As such jessie-backports was removed from the mirrors.
* Replace file() with open() for Python 3 compatabilityBrian May2019-03-046-12/+12
|
* Replace `abc` with repr(abc)Brian May2019-02-182-7/+7
|
* lib/python/bugs.py: Use explicit list comprehension; the "lambda (x,)" ↵Chris Lamb2019-02-111-2/+2
| | | | syntax is not actually valid in Python 3.
* lib/python/debian_support.py: Use repr(..) over backticks; they are removed ↵Chris Lamb2019-02-111-3/+3
| | | | in Python 3.x
* CVEExtendFile: treat TEMP-* entries as uniqueEmilio Pozuelo Monfort2018-12-041-0/+9
| | | | | | Otherwise, they will get rehashed into a different temp name, preventing one to add notes to TEMP entries in an extend file.
* Merge branch 'bam/security-tracker-use_pythons_namedtuple'Salvatore Bonaccorso2018-11-114-96/+3
|\
| * Use the namedtuple class supplied with PythonBrian May2018-08-204-96/+3
| |
* | Replace "x.has_key(y)" with "y in x" syntaxBrian May2018-08-207-16/+16
|/
* Fix print statements for Python 3.6 compatibilityBrian May2018-08-068-72/+77
|
* Replace <> with != for Python 3.6 compatibilityBrian May2018-07-156-26/+26
|
* Update python exception syntax for Python 3.6 compatibilityBrian May2018-07-137-45/+45
|
* Drop powerpc from sid architecturesRaphaël Hertzog2018-07-081-1/+1
| | | | It's gone from the main mirror. It now resides on ports.debian.org.
* Merge branch 'jcristau/security-tracker-head'Salvatore Bonaccorso2018-07-071-2/+5
|\
| * lib: add support for the HEAD HTTP methodJulien Cristau2018-07-061-2/+5
| | | | | | | | Fixes security-tracker-team/security-tracker#3
* | Also set Content-Length for HTMLResultJulien Cristau2018-07-061-0/+1
|/
* Set Content-Length for BinaryResultJulien Cristau2018-07-061-0/+1
|
* lib: add "headers" attribute on Result objectsJulien Cristau2018-07-061-31/+26
| | | | Make it possible to set arbitrary headers when returning a Result.

© 2014-2024 Faster IT GmbH | imprint | privacy policy