Skip to content

Add support for additional DSA lists and CVE extends

Emilio Pozuelo Monfort requested to merge pochu/security-tracker:wip/extends into master

This adds support for CVE extends, so that one can have a separate file which gets merged with CVE/list into the database.

It also allows to add more DSA-like lists. All of this while simplifying some code to avoid duplication (e.g. DLAFile).

The branch needs some squashing but I left as is for now as it may make it easier for review. In any case one can look at the 'changes' in the MR to get a squashed view of the changes.

The config file should probably be moved to a real config file

I'm only aware of one problem, which is marked with a FIXME and that I should fix before this gets merged.

To test or use this, one can just create a data/MY-CVE-EXTENDS/list file and add (bugs.CVEExtendFile, '/MY-CVE-EXTENDS/list') to lib/python/config.py

For another announce project (similar to DLA), just create data/MYSA/list and add it as (bugs.DSAFile, '/MYSA/list'). The changes to bin/gen-DSA help support a bin/gen-MYSA symlink which does the right thing.

@waldi can you take a look and let me know what you think of my changes?

Edited by Emilio Pozuelo Monfort

Merge request reports