/[secure-testing]/bin
ViewVC logotype

Log of /bin

View Directory Listing Directory Listing


Sticky Revision:

Revision 13715 - Directory Listing
Modified Tue Jan 5 01:10:55 2010 UTC (3 years, 5 months ago) by geissert
Add missing escape on regex

Revision 13713 - Directory Listing
Modified Tue Jan 5 00:36:43 2010 UTC (3 years, 5 months ago) by geissert
add .h command to list available commands
add ! command to execute any command via system()

Revision 13694 - Directory Listing
Modified Sat Jan 2 01:37:50 2010 UTC (3 years, 5 months ago) by gilbert-guest
adding support for <undetermined> in the tracker service.  feedback and comments are very welcome.

Revision 13664 - Directory Listing
Modified Sat Dec 26 21:46:48 2009 UTC (3 years, 5 months ago) by geissert
Add a shortcut to report-vuln from within check-new-issues

Any decent editor should be able to pipe the message to mutt or any
other MUA

Revision 13662 - Directory Listing
Modified Sat Dec 26 20:50:38 2009 UTC (3 years, 5 months ago) by geissert
Look for ITPs and RFPs in check-new-issues

Revision 13614 - Directory Listing
Modified Mon Dec 21 06:06:44 2009 UTC (3 years, 5 months ago) by gilbert-guest
a regression in BaseHTTPServer (http://bugs.debian.org/561899) makes it appear that the local tracker isn't running, but it is
- change local ip address to something that works for both stable and unstable

Revision 13540 - Directory Listing
Modified Sun Dec 13 15:37:41 2009 UTC (3 years, 6 months ago) by gilbert-guest
a couple simple, possibly useful scripts

Revision 13517 - Directory Listing
Modified Sat Dec 12 07:43:50 2009 UTC (3 years, 6 months ago) by geissert
Fix link to the svn repo

Revision 13131 - Directory Listing
Modified Wed Oct 28 22:55:17 2009 UTC (3 years, 7 months ago) by jwilk-guest
embedded-cleanup: end errors/warnings list with a newline.

Revision 13058 - Directory Listing
Modified Wed Oct 21 18:43:24 2009 UTC (3 years, 7 months ago) by derevko-guest
NFUs
s/security-tracker.debian.net/security-tracker.debian.org

Revision 12999 - Directory Listing
Modified Mon Oct 12 17:41:52 2009 UTC (3 years, 8 months ago) by fw
bin/tracker_service.py (TrackerService.page_data_pts): add PTS export

Revision 12993 - Directory Listing
Modified Sun Oct 11 19:00:26 2009 UTC (3 years, 8 months ago) by fw
bin/tracker_service.py (TrackerService.page_redirect): handle empty argument

Revision 12986 - Directory Listing
Modified Sun Oct 11 12:05:22 2009 UTC (3 years, 8 months ago) by fw
bin/test-web-server: switch to HTTP invocation

Revision 12985 - Directory Listing
Modified Sun Oct 11 12:04:15 2009 UTC (3 years, 8 months ago) by fw
bin/tracker_service.py: implement HTTP invocation

The old command line arguments still create a servinvoke-based service.

Revision 12706 - Directory Listing
Modified Sat Aug 29 18:34:40 2009 UTC (3 years, 9 months ago) by gilbert-guest
inject-embedded-code-copies: fix last cve in list getting ommited, and remove dead code

Revision 12669 - Directory Listing
Modified Mon Aug 24 01:48:47 2009 UTC (3 years, 9 months ago) by gilbert-guest
cleanup of inject-embedded-code-copies, copyright notice added

Revision 12668 - Directory Listing
Modified Mon Aug 24 00:59:44 2009 UTC (3 years, 9 months ago) by gilbert-guest
introduction of inject-embedded-code-copies

Revision 12517 - Directory Listing
Modified Sat Aug 8 17:26:46 2009 UTC (3 years, 10 months ago) by geissert
Add a 'fixed-only' mode to get-bug-status so that it can be used for
general maintenance pourposes

Revision 12055 - Directory Listing
Modified Sat Jun 6 08:13:13 2009 UTC (4 years ago) by sf
- make check-new-issues -U ignore removed packages
- add some packages to the removed list

Revision 12006 - Directory Listing
Modified Mon Jun 1 11:03:28 2009 UTC (4 years ago) by sf
make sure bugs with 'bug filed' are also selected with -U

Revision 12001 - Directory Listing
Modified Sat May 30 20:43:39 2009 UTC (4 years ago) by sf
Add -u/-U options to also/only select issues that are marked as unfixed but
are missing a bug reference.

This ignores some packages (kernels, some removed packages, php4).

Comments welcome.

Revision 11861 - Directory Listing
Modified Sun May 10 05:20:38 2009 UTC (4 years, 1 month ago) by atomo64-guest
New script to detect inconsistencies in embedded-code-copies

Revision 11725 - Directory Listing
Modified Sun Apr 26 22:45:45 2009 UTC (4 years, 1 month ago) by atomo64-guest
It uses bashisms, changing shebang to bash

Revision 11578 - Directory Listing
Modified Tue Apr 7 21:44:10 2009 UTC (4 years, 2 months ago) by gilbert-guest
did not mean to commit change to update-nvd; reverting

Revision 11576 - Directory Listing
Modified Tue Apr 7 21:23:54 2009 UTC (4 years, 2 months ago) by gilbert-guest
some info on postgresql issue

Revision 11223 - Directory Listing
Modified Sun Feb 15 17:17:11 2009 UTC (4 years, 4 months ago) by fw
bin/tracker_service.py: add oldstable-backports

Revision 11220 - Directory Listing
Modified Sun Feb 15 13:29:11 2009 UTC (4 years, 4 months ago) by fw
bin/tracker_service.py: provide a link to the oldstable page

Revision 11216 - Directory Listing
Modified Sat Feb 14 17:02:12 2009 UTC (4 years, 4 months ago) by thijs
resurrect oldstable

Revision 11215 - Directory Listing
Modified Sat Feb 14 16:57:17 2009 UTC (4 years, 4 months ago) by thijs
oldstable is now etch, stable is now lenny, testing is now squeeze

Revision 10840 - Directory Listing
Modified Sat Jan 3 12:05:35 2009 UTC (4 years, 5 months ago) by sf
allow to read embedded-code-copies from stdin, for use in svn hook

Revision 10838 - Directory Listing
Modified Sat Jan 3 11:46:47 2009 UTC (4 years, 5 months ago) by sf
do not escape spaces when calling apt-cache search

Revision 10628 - Directory Listing
Modified Fri Dec 5 19:10:23 2008 UTC (4 years, 6 months ago) by fw
bin/show-debsecan: new script to debug debsecan data

Revision 10607 - Directory Listing
Modified Wed Dec 3 20:02:24 2008 UTC (4 years, 6 months ago) by fw
bin/tracker_service.py: Add overview page for stable backports

This compares the version numbers against unstable (instead of
testing, which would be more appropriate), but it is better than
nothing.

Revision 10581 - Directory Listing
Modified Tue Dec 2 21:13:10 2008 UTC (4 years, 6 months ago) by fw
bin/apt-update-file: In case of an error, print source and target

Revision 10568 - Directory Listing
Modified Mon Dec 1 19:05:28 2008 UTC (4 years, 6 months ago) by fw
bin/test-web-server: New script for testing purposes

Revision 10526 - Directory Listing
Modified Sat Nov 29 10:36:17 2008 UTC (4 years, 6 months ago) by fw
bin/tracker_service.py: Remove oldstable from the web front end

We can resurrect it if needed again.

Revision 10437 - Directory Listing
Modified Thu Nov 20 15:15:24 2008 UTC (4 years, 6 months ago) by fw
bin/update-nvd: Remove duplicates before loading NVD data

Revision 10214 - Directory Listing
Modified Fri Oct 31 14:15:58 2008 UTC (4 years, 7 months ago) by thomasbl-guest
change bin/get-todo-items, so that you can run it from everywhere


Revision 10016 - Directory Listing
Modified Tue Oct 7 07:03:04 2008 UTC (4 years, 8 months ago) by thijs
also support subjects that have "DSA-nnnn-i" instead of "DSA nnnn-i", this
caused some recent advisories not to be added automatically

Revision 9877 - Directory Listing
Modified Tue Sep 23 23:11:54 2008 UTC (4 years, 8 months ago) by stef-guest
if automatic search gives only a few results, display all of them instead of just the count (-a 0 gives the old behaviour)

Revision 9874 - Directory Listing
Modified Tue Sep 23 21:49:30 2008 UTC (4 years, 8 months ago) by stef-guest
correctly display the apt-file command that is executed

Revision 9808 - Directory Listing
Modified Sat Sep 13 10:01:00 2008 UTC (4 years, 9 months ago) by thijs
update nvd url

Revision 9038 - Directory Listing
Modified Wed Jun 11 19:29:21 2008 UTC (5 years ago) by nion
remove superfluous newline

Revision 9011 - Directory Listing
Modified Sat Jun 7 09:12:39 2008 UTC (5 years ago) by nion
use urllib instead of httplib as it takes care of http_proxy by itself

Revision 9005 - Directory Listing
Modified Fri Jun 6 18:08:29 2008 UTC (5 years ago) by nion
fix http replacement, todo: seperate proxy processing from http function

Revision 9002 - Directory Listing
Modified Fri Jun 6 14:26:15 2008 UTC (5 years ago) by nion
fix proxy support if http_proxy is not set

Revision 8997 - Directory Listing
Modified Fri Jun 6 13:36:21 2008 UTC (5 years ago) by nion
NFUs

Revision 8857 - Directory Listing
Modified Wed May 21 08:30:08 2008 UTC (5 years ago) by fw
Remove oldstable from the tracker

Revision 8466 - Directory Listing
Modified Tue Apr 1 22:07:34 2008 UTC (5 years, 2 months ago) by stef-guest
fix typo

Revision 8465 - Directory Listing
Modified Tue Apr 1 21:52:08 2008 UTC (5 years, 2 months ago) by stef-guest
fix escaping of product names

Revision 8464 - Directory Listing
Modified Tue Apr 1 21:36:42 2008 UTC (5 years, 2 months ago) by stef-guest
localtime is weird and starts counting months with 0

Revision 8437 - Directory Listing
Modified Fri Mar 28 17:08:08 2008 UTC (5 years, 2 months ago) by nion
adding report-vuln script

Revision 8397 - Directory Listing
Modified Mon Mar 24 17:12:19 2008 UTC (5 years, 2 months ago) by nion
add date to subject of testing-security update notifications

Revision 8112 - Directory Listing
Modified Fri Feb 8 21:58:10 2008 UTC (5 years, 4 months ago) by thijs
location of testing.pl has been officialised

Revision 7925 - Directory Listing
Modified Mon Jan 14 23:08:05 2008 UTC (5 years, 5 months ago) by stef-guest
- preliminary support for embedded-code-copies
- minor improvements at guessing the product name

Revision 7808 - Directory Listing
Modified Thu Jan 3 21:27:59 2008 UTC (5 years, 5 months ago) by stef-guest
- readline support (needs libterm-readline-gnu-perl)
- be smarter about where to find data/CVE/list

Revision 7645 - Directory Listing
Modified Mon Dec 17 21:28:59 2007 UTC (5 years, 6 months ago) by fw
* tracker.cgi
  Remove obsolete CGI script

Revision 7489 - Directory Listing
Modified Mon Dec 3 22:33:14 2007 UTC (5 years, 6 months ago) by nion
secure-testing-master -> testing-security

Revision 7294 - Directory Listing
Modified Tue Nov 13 15:37:14 2007 UTC (5 years, 7 months ago) by nion
add bug severity to output

Revision 7029 - Directory Listing
Modified Sat Oct 20 09:44:07 2007 UTC (5 years, 8 months ago) by stef-guest
fix usage message

Revision 6806 - Directory Listing
Modified Fri Oct 5 11:36:49 2007 UTC (5 years, 8 months ago) by nion
recognize if the maintainer is already preparing a fixed upload (pending tag)

Revision 6770 - Directory Listing
Modified Wed Oct 3 07:44:21 2007 UTC (5 years, 8 months ago) by fw
dsa2list: add missing "continue"

A pointless performance tweak.

Revision 6769 - Directory Listing
Modified Wed Oct 3 07:44:19 2007 UTC (5 years, 8 months ago) by fw
dsa2list: add support for the "dak new-security-install" format

This should not be used for DSAs, but it's out there anyway.

Revision 6768 - Directory Listing
Modified Wed Oct 3 07:44:14 2007 UTC (5 years, 8 months ago) by fw
dsa2list: better detection of installation path

It's now possible to symlink the script to ~/bin and run it
from there.

Revision 6679 - Directory Listing
Modified Sun Sep 23 13:18:01 2007 UTC (5 years, 8 months ago) by nion
recognize if a patch is available

Revision 6654 - Directory Listing
Modified Thu Sep 20 18:14:54 2007 UTC (5 years, 9 months ago) by nion
get-todo-items returns cve, package name, bug and bug status for a given unfixed issue, get-bug-status is used to get the status via soap

Revision 6583 - Directory Listing
Modified Wed Sep 12 00:56:21 2007 UTC (5 years, 9 months ago) by joeyh
fix number

Revision 6578 - Directory Listing
Modified Tue Sep 11 20:06:21 2007 UTC (5 years, 9 months ago) by stef-guest
fix typo, add note

Revision 6559 - Directory Listing
Modified Mon Sep 10 06:39:35 2007 UTC (5 years, 9 months ago) by thijs
make dsa2list executable

Revision 6547 - Directory Listing
Modified Sat Sep 8 09:23:56 2007 UTC (5 years, 9 months ago) by stef-guest
fix typos

Revision 6538 - Directory Listing
Modified Fri Sep 7 18:32:11 2007 UTC (5 years, 9 months ago) by stef-guest
add perl script to check for fixed issues in testing

Revision 6507 - Directory Listing
Modified Wed Sep 5 12:01:36 2007 UTC (5 years, 9 months ago) by thijs
more fixes for cve urls

Revision 6473 - Directory Listing
Modified Mon Sep 3 07:44:07 2007 UTC (5 years, 9 months ago) by fw
* bin/dsa2list:
  Ignore non-existent files.
  Reverse output order to match file order.

Revision 6472 - Directory Listing
Modified Sun Sep 2 23:42:46 2007 UTC (5 years, 9 months ago) by fw
* bin/dsa2list: Fix date format

Revision 6467 - Directory Listing
Modified Sun Sep 2 17:13:53 2007 UTC (5 years, 9 months ago) by stef-guest
fix mitre url in some other places

Revision 6451 - Directory Listing
Modified Fri Aug 31 11:54:29 2007 UTC (5 years, 9 months ago) by nion
fixed escaping of generated java script

Revision 6444 - Directory Listing
Modified Thu Aug 30 15:24:04 2007 UTC (5 years, 9 months ago) by fw
* bin/check-sytax:
  Support reading from standard input

Revision 6442 - Directory Listing
Modified Thu Aug 30 15:21:27 2007 UTC (5 years, 9 months ago) by fw
* bin/check-sytax:
  Remove CAN parser

Revision 6438 - Directory Listing
Modified Thu Aug 30 09:56:15 2007 UTC (5 years, 9 months ago) by fw
* bin/dsa2list:
  Permit processing of multiple mail messages

Revision 6436 - Directory Listing
Modified Thu Aug 30 09:51:23 2007 UTC (5 years, 9 months ago) by fw
* bin/dsa2list:
  New version that processes postings to debian-security-announce

Revision 6417 - Directory Listing
Modified Tue Aug 28 20:57:52 2007 UTC (5 years, 9 months ago) by stef-guest
change CVE URL

Revision 6389 - Directory Listing
Modified Fri Aug 24 09:27:16 2007 UTC (5 years, 9 months ago) by thijs
textfix

Revision 6342 - Directory Listing
Modified Thu Aug 16 20:58:17 2007 UTC (5 years, 10 months ago) by stef-guest
fix bug that empty list of cross-references was not deleted

Revision 6277 - Directory Listing
Modified Sat Aug 11 18:36:41 2007 UTC (5 years, 10 months ago) by stef-guest
change mailing list in tracker

Revision 6076 - Directory Listing
Modified Fri Jun 29 16:36:14 2007 UTC (5 years, 11 months ago) by stef-guest
back out website changes I didn't really want to commit

Revision 6075 - Directory Listing
Modified Fri Jun 29 16:34:06 2007 UTC (5 years, 11 months ago) by stef-guest
krb5 fixed

Revision 6009 - Directory Listing
Modified Sat Jun 16 10:41:23 2007 UTC (6 years ago) by fw
* bin/mass-bug-filer:
  Small script to file security bugs, with a few sanity checks.

Revision 5745 - Directory Listing
Modified Fri Apr 27 19:10:58 2007 UTC (6 years, 1 month ago) by fw
* bin/update-db:
  Report the location of parse errors in Debian's meta-data files.

Revision 5655 - Directory Listing
Modified Sun Apr 15 09:51:47 2007 UTC (6 years, 2 months ago) by fw
* bin/tracker_service.py:
  Update DTSA candidates page for the etch release

Revision 5470 - Directory Listing
Modified Sun Feb 18 16:50:24 2007 UTC (6 years, 4 months ago) by fw
Treat packages marked as <removed> as source packages.
This allows us to track firefox issues again.

* lib/python/bugs.py (FileBase):
  Keep track of removed packages.

* lib/python/security_db.py
  (DB.readBugs): Populate removed_packages table using <removed> entries.
  (DB.readRemovedPackages): Remove method.

* bin/update-db:
  Do not call readRemovedPackages anymore.

Revision 5242 - Directory Listing
Modified Thu Jan 11 20:24:27 2007 UTC (6 years, 5 months ago) by stef-guest
fix to really support non DSA/DTSA cross references, also fixes some missing 'TODO: check' entries

Revision 5190 - Directory Listing
Modified Wed Dec 27 23:25:37 2006 UTC (6 years, 5 months ago) by stef-guest
- change regexp to select TODOs from "TODO: check" to "TODO: check$";
  old behaviour available with -T
  any regexp can be specified with -t
- regexp for selection of issues based on name can be changed with -i

Revision 5103 - Directory Listing
Modified Sun Dec 10 18:36:34 2006 UTC (6 years, 6 months ago) by fw
Various changes to switch from FAKE- to TEMP- prefixes

(Yeah, less than stellar engineering that this isn't concentrated
in a single place.)

Revision 5100 - Directory Listing
Modified Sun Dec 10 17:35:42 2006 UTC (6 years, 6 months ago) by fw
Add a no-dsa filter to the "testing" web page

lib/python/security_db.py (DB._initViews):
  Add no_dsa column to the testing_status table.

bin/tracker_service.py (TrackerService.page_status_release_testing):
  Use it to implement the filter in the same way as for "stable".

Revision 5041 - Directory Listing
Modified Fri Dec 1 22:39:30 2006 UTC (6 years, 6 months ago) by stef-guest
prevent pre-2003 TODOs from beind added

Revision 5001 - Directory Listing
Modified Wed Nov 22 22:42:18 2006 UTC (6 years, 6 months ago) by stef-guest
- bugfix: we need to add "TODO: check" even if the CVE was know from a DSA before appearing at mitre
- use gzipped version of allitems.html to save bandwidth

Revision 4941 - Directory Listing
Modified Wed Nov 8 21:35:50 2006 UTC (6 years, 7 months ago) by stef-guest
check-new-issues
downloads allitems.txt from cve.mitre.org and shows full decription for each
"TODO: check" item. It then tries to guess name and/or script file names and
does apt-cache or apt-file search and allows to directly replace the TODO by a
NFU. This is good for weeding out all those trivial PHP NFUs issues.

check-new-issues -l
will just list the issues with with a longer description than in CVE/list itself.
This helps when looking for interesting new issues.

check-new-issues -h
will give some help

All in all nothing fancy but saves some time. Currently it want's to be called
from the parent dir as:
secure-testing/bin/check-new-issues

Revision 4662 - Directory Listing
Modified Fri Sep 1 16:49:14 2006 UTC (6 years, 9 months ago) by stef-guest
fix typo

Revision 4570 - Directory Listing
Modified Tue Aug 15 17:50:19 2006 UTC (6 years, 10 months ago) by seanius
s/participiating/participating/

Revision 4284 - Directory Listing
Modified Thu Jun 22 21:44:30 2006 UTC (6 years, 11 months ago) by stef-guest
- use new url for testing-security
- point to idssi.enyo.de/tracker
- note that some fixes might be in experimental, not unstable

Revision 4173 - Directory Listing
Modified Sun Jun 11 02:06:20 2006 UTC (7 years ago) by joeyh
use dak ls unstead of madison

Revision 4005 - Directory Listing
Modified Sat May 20 17:08:37 2006 UTC (7 years, 1 month ago) by fw
* lib/python/security_db.py (DB.getTODOs):
  Add hide_check parameter.

* bin/tracker_service.py (TrackerService.page_status_todo):
  Use it.

Revision 3902 - Directory Listing
Modified Mon May 1 09:04:25 2006 UTC (7 years, 1 month ago) by fw
bin/tracker_service (BugFilter):
  Fix crash while displaying the unstable/testing overviews.

Revision 3859 - Directory Listing
Modified Sun Apr 23 13:24:05 2006 UTC (7 years, 1 month ago) by fw
Implement filtering vulnerabilities for which no DSA is scheduled.

bin/tracker_service.py (BugFilter):
  Refactor for better extensibility.
(BugFilterNoDSA):
  New class.
(TrackerService.page_status_release_stable_oldstable):
  Add no-dsa filter.

Revision 3597 - Directory Listing
Modified Sat Mar 11 18:44:21 2006 UTC (7 years, 3 months ago) by fw
bin/tracker_service.py (TrackerService.make_search_button):
  Add missing space.

Revision 3596 - Directory Listing
Modified Sat Mar 11 18:43:13 2006 UTC (7 years, 3 months ago) by fw
bin/tracker_service.py (TrackerService.make_search_button):
  Link to report page.

Revision 3595 - Directory Listing
Modified Sat Mar 11 18:40:14 2006 UTC (7 years, 3 months ago) by fw
bin/tracker_service.py (TrackerService.page_home):
  Add missing space.
(TrackerService.page_report):
  Point URL directly to the introduction document.

Revision 3594 - Directory Listing
Modified Sat Mar 11 18:27:37 2006 UTC (7 years, 3 months ago) by fw
Incorporate Micah's changes.

bin/tracker_service.py (TrackerService.page_home):
  Modernize.
(TrackerService.page_report):
  New page.

Revision 3479 - Directory Listing
Modified Tue Feb 14 20:56:53 2006 UTC (7 years, 4 months ago) by joeyh
ignore <no-dsa>

Revision 3334 - Directory Listing
Modified Sat Jan 21 20:31:38 2006 UTC (7 years, 4 months ago) by joeyh
skip codename tagged lines

Revision 3311 - Directory Listing
Modified Tue Jan 17 18:46:14 2006 UTC (7 years, 5 months ago) by fw
bin/tracker_service.py (TrackerService.page_object_or_redirect):
  Handle FAKE-nnn objects.
(TrackerService.page_debian_bug):
  Make this method usable for dealing with FAKE-nnn objects.

Revision 3166 - Directory Listing
Modified Tue Dec 27 15:08:37 2005 UTC (7 years, 5 months ago) by fw
bin/tracker_service.py (TrackerService.page_data_latently_vulnerable):
  Report on "unimportant" urgency.

Revision 3164 - Directory Listing
Modified Tue Dec 27 13:58:32 2005 UTC (7 years, 5 months ago) by fw
bin/dsa2list:
  Remove whitespace around CVE list.

Revision 3136 - Directory Listing
Modified Fri Dec 23 21:09:32 2005 UTC (7 years, 5 months ago) by fw
bin/tracker_service.py (TrackerService):
  Add page data/latently-vulnerable.
(TrackerService.page_data_latently_vulnerable):
  New method.

Revision 3129 - Directory Listing
Modified Fri Dec 23 13:15:25 2005 UTC (7 years, 5 months ago) by fw
lib/python/security_db.py (DB.initSchema):
  Add index on package_notes(package) (no schema version bump needed).
(DB.calculateDebsecan0):
  Renamed from DB.calculateDebsecan.
(DB.calculateDebsecan1):
  New method which generates version 1 format (with pinning support
  wtc.).
(DB.calculateDebsecan):
  Invokes both the version 0 and version 1 methods.

bin/update-db:
  Adjust accordingly.

Revision 3107 - Directory Listing
Modified Tue Dec 20 12:44:04 2005 UTC (7 years, 6 months ago) by fw
bin/dsa2list:
  New script.

doc/narrative_introduction:
  Mention it.

Revision 3080 - Directory Listing
Modified Sat Dec 17 11:58:49 2005 UTC (7 years, 6 months ago) by fw
bin/tracker_service.py (TrackerService.page_bug):
  One more tweak for compactness.

Revision 3079 - Directory Listing
Modified Sat Dec 17 11:57:44 2005 UTC (7 years, 6 months ago) by fw
bin/tracker_service.py (TrackerService.page_bug):
  Make header more compact.

Revision 3078 - Directory Listing
Modified Sat Dec 17 11:17:21 2005 UTC (7 years, 6 months ago) by fw
Store CVE descriptions in the nvd_data table.  Enable incremental
NVD updates.

lib/python/security_db.py (DB):
  Bump schema version.  Add cve_desc column to the nvd_data table.
(DB.updateNVD):
  New method.

bin/update-nvd:
  If the -i option is specified, use updateNVD instead of replaceNVD.

lib/python/nvd.py (_Parser):
  Add new member variable path.
(_Parser.characters):
  New method.
(_Parser.endElement):
  Store cve_desc variable.

bin/tracker_service.py (TrackerService.page_bug):
  Use NVD description if available.

Revision 3071 - Directory Listing
Modified Fri Dec 16 09:43:24 2005 UTC (7 years, 6 months ago) by fw
bin/tracker_service.py (TrackerService.page_home):
  Update to include oldstable.

Revision 3069 - Directory Listing
Modified Fri Dec 16 09:23:57 2005 UTC (7 years, 6 months ago) by fw
lib/python/security_db.py (DB):
  Bump schema version.  Add oldstable_status view.

bin/tracker_service.py (TrackerService):
  Add oldstable page.

Revision 3056 - Directory Listing
Modified Thu Dec 15 13:44:01 2005 UTC (7 years, 6 months ago) by fw
bin/update-db:
  Do not hard-code the database name.  Use SQLite in non-synchronous
  mode.

Makefile (all):
  Run bin/update-db on a copy of the database, so that we can continue
  to serve requests while the database is being updated.

Revision 3054 - Directory Listing
Modified Thu Dec 15 12:50:36 2005 UTC (7 years, 6 months ago) by fw
bin/apt-update-file:
  Be less verbose.

Revision 3053 - Directory Listing
Modified Thu Dec 15 12:46:09 2005 UTC (7 years, 6 months ago) by fw
bin/update-db:
  Be less verbose.

Revision 3051 - Directory Listing
Modified Thu Dec 15 11:37:40 2005 UTC (7 years, 6 months ago) by fw
lib/python/security_db.py (DB):
  Bump schema version.
(DB.initSchema):
  Add debsecan_data table.
(DB.calculateDebsecan, DB.getDebsecan):
  New methods.

bin/update-db:
  Invoke calculateDebsecan.

bin/tracker_service.py (TrackerService):
  Add support for debsecan/* pages.
(TrackerService.page_debsecan):
  New method.

Revision 3014 - Directory Listing
Modified Mon Dec 12 15:28:39 2005 UTC (7 years, 6 months ago) by fw
bin/tracker_service.py (TrackerService.page_status_release_unstable):
  Correct page title.

Revision 2679 - Directory Listing
Modified Sun Nov 6 14:44:51 2005 UTC (7 years, 7 months ago) by fw
bin/tracker_service.py (TrackerService.page_status_dtsa_candidates):
  Fix message in front of the generated table.

Revision 2659 - Directory Listing
Modified Fri Nov 4 01:19:19 2005 UTC (7 years, 7 months ago) by joeyh
deal with the case where a bug moved from ove CVE id to another, don't
unset the tracked flag last in this case, instead, unset it and then re-set
it.

Revision 2554 - Directory Listing
Modified Mon Oct 24 14:43:04 2005 UTC (7 years, 7 months ago) by fw
Add a summary page for tracked bugs without a CVE name.

lib/python/security_db.py (DB.getFakeBugs):
  New method.

bin/tracker_service.py (TrackerService.page_data_fake_names):
  New method.
(TrackerService.__intit__, TrackerService.page_home):
  Use it.

Revision 2521 - Directory Listing
Modified Thu Oct 20 17:50:54 2005 UTC (7 years, 8 months ago) by joeyh
skip <unfixed> when looking for kernel packges that need update

Revision 2520 - Directory Listing
Modified Thu Oct 20 17:24:52 2005 UTC (7 years, 8 months ago) by joeyh
ignore new distro tags until I work out something better to do with them

Revision 2511 - Directory Listing
Modified Thu Oct 20 13:47:06 2005 UTC (7 years, 8 months ago) by fw
bin/tracker_service.py (TrackerService.page_bug):
  For redirect URLs, normalize CAN-* to CVE-*.

Revision 2495 - Directory Listing
Modified Thu Oct 20 09:32:16 2005 UTC (7 years, 8 months ago) by fw
bin/tracker_service.py (TrackerService):
  Changes for the CVE transition.

Revision 2491 - Directory Listing
Modified Thu Oct 20 09:04:11 2005 UTC (7 years, 8 months ago) by fw
 r773@deneb:  fw | 2005-10-20 10:42:35 +0200
 bin/tracker_service.py (BugFilter):
   New class.
 (TrackerService):
   Use it where applicable.

Revision 2489 - Directory Listing
Modified Thu Oct 20 09:03:51 2005 UTC (7 years, 8 months ago) by fw
 r639@deneb:  fw | 2005-10-14 16:07:15 +0200
 bin/tracker_service.py (TrackerService.page_home):
   Mention NVD explicitly.

Revision 2488 - Directory Listing
Modified Thu Oct 20 09:03:39 2005 UTC (7 years, 8 months ago) by fw
 r638@deneb:  fw | 2005-10-14 15:43:12 +0200
 bin/tracker_service.py (TrackerService.page_home):
   Document external interfaces.
 (TrackerService.page_bug):
   Add NVD references.
 (TrackerService.page_status_release_stable,
  TrackerService.page_status_release_testing):
   Show NVD remote attack range if present.
 (TrackerService.url_nvd, TrackerService.make_nvd_ref):
   New.
 
 lib/python/security_db.py (NVDEntry):
   New class.
 (DB.initSchema):
   New nvd_data table.  Update stable_status and testing_status views.
 (DB.replaceNVD, DB.getNVD):
   New methods.
 
 bin/update-nvd, lib/python/nvd.py:
   New files.

Revision 2485 - Directory Listing
Modified Thu Oct 20 09:03:03 2005 UTC (7 years, 8 months ago) by fw
 r628@deneb:  fw | 2005-10-14 10:35:43 +0200
 bin/tracker_service.py (TrackerService.page_redirect):
   New method.  Invokes page_object_or_redirect.
 (TrackerService.page_object):
   Reimplement in terms of page_object_or_redirect.
 (TrackerService.page_object_or_redirect):
   Display an object page, or redirect to the correct page
   (which can be external).

Revision 2482 - Directory Listing
Modified Thu Oct 20 09:02:12 2005 UTC (7 years, 8 months ago) by fw
 r614@deneb:  fw | 2005-10-13 22:12:28 +0200
 Add new web front end.
 
 bin/tracker_service.py, lib/python/web_support.py:
   New files.

Revision 2481 - Directory Listing
Modified Thu Oct 20 09:01:57 2005 UTC (7 years, 8 months ago) by fw
 r613@deneb:  fw | 2005-10-13 22:02:21 +0200
 bin/tracker.cgi (print_bug):
   No longer claim that Debian is not affected when it might be.

Revision 2478 - Directory Listing
Modified Thu Oct 20 09:01:15 2005 UTC (7 years, 8 months ago) by fw
 r304@deneb:  fw | 2005-10-01 11:19:27 +0200
 Add overview page for the stable suite.
 
 bin/tracker.cgi (print_stable_status):
   New function.
 lib/python/security_db.py (DB.initSchema):
   Add stable_status view.

Revision 2471 - Directory Listing
Modified Thu Oct 20 04:58:38 2005 UTC (7 years, 8 months ago) by joeyh
fix a bug in processing of multiple bugs in one line

Revision 2468 - Directory Listing
Modified Thu Oct 20 00:40:22 2005 UTC (7 years, 8 months ago) by joeyh
add a program to manage usertags in the bts

Revision 2467 - Directory Listing
Modified Wed Oct 19 23:53:49 2005 UTC (7 years, 8 months ago) by joeyh
update for slight html changes (really should use the xml..)

Revision 2458 - Directory Listing
Modified Wed Oct 19 22:54:03 2005 UTC (7 years, 8 months ago) by joeyh
mods for CVE merge

Revision 2431 - Directory Listing
Modified Mon Oct 17 22:24:52 2005 UTC (7 years, 8 months ago) by joeyh
aha, I missed some syntax changes here

Revision 2336 - Directory Listing
Modified Thu Oct 6 19:50:53 2005 UTC (7 years, 8 months ago) by joeyh
drop issues affecting only the hurd

Revision 2305 - Directory Listing
Modified Tue Oct 4 20:18:37 2005 UTC (7 years, 8 months ago) by joeyh
support <removed>

Revision 2264 - Directory Listing
Modified Sat Oct 1 18:20:13 2005 UTC (7 years, 8 months ago) by joeyh
support whitespace after { in cross-references to be robust

Revision 2253 - Directory Listing
Modified Fri Sep 30 13:07:44 2005 UTC (7 years, 8 months ago) by neilm
Updated mirror url. Not sure if it'll make it work, but it may do :)

Revision 2240 - Directory Listing
Modified Thu Sep 29 21:06:02 2005 UTC (7 years, 8 months ago) by fw
Add tons of missing epochs in versions.

http://idssi.enyo.de/tracker/data/missing-epochs contains a list of
problematic source packages.  The remaining ones should be okay.

Revision 2225 - Directory Listing
Modified Thu Sep 29 12:40:28 2005 UTC (7 years, 8 months ago) by fw
Commit the tracker.cgi Python script.

Sorry, this script is a complete mess. 8-(

Revision 2168 - Directory Listing
Modified Sat Sep 24 21:42:05 2005 UTC (7 years, 8 months ago) by joeyh
fix

Revision 2161 - Directory Listing
Modified Sat Sep 24 20:42:44 2005 UTC (7 years, 8 months ago) by joeyh
new RESERVED and REJECTED

Revision 2155 - Directory Listing
Modified Sat Sep 24 15:35:43 2005 UTC (7 years, 8 months ago) by fw
bin/update-db:
  Improve reporting of syntax errors.

Revision 2145 - Directory Listing
Modified Sat Sep 24 03:58:31 2005 UTC (7 years, 8 months ago) by joeyh
deal with notfixed change

Revision 2088 - Directory Listing
Modified Thu Sep 22 12:00:31 2005 UTC (7 years, 8 months ago) by fw
lib/python/security_db.py (DB.initSchema):
  Add removed_packages table.
(DB.readRemovedPackages, DB.getUnknownPackages):
  New.

bin/update-db:
  Read removed packages.

data/packages/removed-packages:
  New file.

Revision 2000 - Directory Listing
Modified Thu Sep 15 15:00:32 2005 UTC (7 years, 9 months ago) by fw
Commit early if we are creating a new file.  This means that the work is
not wasted if an error occurs later.

Revision 1994 - Directory Listing
Modified Thu Sep 15 10:11:44 2005 UTC (7 years, 9 months ago) by fw
Implement bin/update-db, to update the database with a single command.
Most processing is skipped if no input files have been modified.

lib/python/security_db.py (SchemaMismatch):
  New exception.
(DB):
  Handle schema versioning.
(DB.initSchema):
  Add subrelease column to source_packages and binary_packages.
  Set user_version.
  Remove stray commit.
(DB._parseFile):
  Return information to the caller if the file is unchanged.
(DB.readPackages):
  Move deletion code to callees.
(DB._readSourcePackages, DB._readBinaryPackages):
  Implement incremental updates.  Add subrelease.
  Need to invoke _clearVersions if any changes are made.
(DB.deleteBugs, DB.finishBugs):
  Moved into readBugs.
(DB.insertBugs):
  Rename ...
(DB.readBugs):
  ... to this one.  Implement incremental updates.
  Invoke _clearVersions if necessary.
(DB._clearVersions):
  Add.
(DB._updateVersions):
  Skip processing if _clearVersions has not been invoked.
(DB.getVersion, DB.releaseContainsPackage, DB._synthesizeReleases):
  Obsolete, remove.
(test):
  Update.

lib/python/bugs.py (CANFile, CVEFile):
  Split into two classes, which handle the differences between the two
  files.

bin/check-syntax:
  Update accordingly.

bin/update-db:
  New database update script.  Implements incremental updates.

Makefile:
  Remove references to bin/update-packages.  Simplify drastically.

Revision 1983 - Directory Listing
Modified Wed Sep 14 20:48:54 2005 UTC (7 years, 9 months ago) by fw
This change groups binary packages for different architectures, as long
as they have the same version.  Synthesis of testing/stable/oldstable
has been disabled (and will be replaced with new code).

lib/python/security_db.py (mergeLists):
  New helper functions to deal with architecture lists.
(DB.initSchema):
  Add parsed column to inodeprints table.
  Update source_packages and binary_packages table.
  Split package_status into source_package_status and
  binary_package_status.
(DB.updateSources, DB.updatePackages):
  Remove and replace with ...
(DB.readPackages):
  ... new method.
(DB.availableReleases, DB._updateVersions):
  Adjust to new schema.
(DB.calculateVulnerabilities):
  Disable synthesis of testing etc.
  Adjust to new schema.
  Fix bug in large INSERT INTO statements: Need t.release = p.release
  instead of t.release = n.release.
  Add return to disable bug-specific rating code.
(test):
  Update.

lib/python/bugs.py (PackageNote.releaseStatus):
  Rename ...
(PackageNote.sourceStatus):
  ... and make it specific to source packages.
(BugFromDB.getDebianBugs):
  New method to get a list of Debian bug numbers.

bin/update-packages (import):
  Automatically reads the correct directory.

Makefile (stamps/packages-imported):
  Update accordingly.

Revision 1982 - Directory Listing
Modified Wed Sep 14 19:20:56 2005 UTC (7 years, 9 months ago) by joeyh
clean up temp file

Revision 1977 - Directory Listing
Modified Wed Sep 14 13:27:19 2005 UTC (7 years, 9 months ago) by fw
Ongoing work to implement version tracking.  The current approach does
not scale with the number of architectures, though.

lib/python/security_db.py (DB):
  Add nicknames member.
(DB.initSchema):
  Add nicknames and package_status tables.
  Add index package_notes_bug.
(DB._synthesizeReleases):
  New method to build testing etc. distributions.
(DB.calculateVulnerabilities):
  Update to use new tables.  Return list of problems detected.

lib/python/bugs.py (PackageNote.releaseStatus):
  New method to check for affected releases.

bin/update-vulnerabilities:
  Print list of detected problems.

Revision 1973 - Directory Listing
Modified Wed Sep 14 08:59:50 2005 UTC (7 years, 9 months ago) by fw
Add table version_linear_order, which will enable us to make version
comparisons in pure SQL.

lib/python/security_db.py (DB):
  Add verbose flag to constructor.
(DB.initSchema):
  Add table version_linear_order.  Add version ID fields to tables
  package_notes, source_packages, binary_packages.
(DB._maybeUpdate):
  Use self.verbose.
(DB.availableReleases):
  New method to get a least of releases in the database.
(DB._updateVersions):
  Calculate a linear order of versions.  This will be used to speed up
  the vulnerability rating process.
(DB.calculateVulnerabilities):
  Invoke _updateVersions.  Use self.verbose.

bin/update-vulnerabilities, bin/update-packages:
  Set database verbose flag.

Revision 1951 - Directory Listing
Modified Tue Sep 13 14:08:22 2005 UTC (7 years, 9 months ago) by fw
First step towards calculating sets of vulnerable packages.  This is
currently directed towards testing (but does not yet process the
secure-testing archive).

A new table is added, so "make clean" is required.

The remaining problem (besides potential bugs in the code) is how to
deal with kernel updates, IOW how to detect them and ignore them.

bin/update-vulnerabilities:
  New script, updates the bugs_status table.

lib/python/bugs.py (PackageNote.affects):
  Fix all kinds of errors.  The code never ran before, it seems. 8-/
(PackageNote.fixedVersion):
  Add.
(BugBase.hasTODO):
  Add.
(BugReservedCVE, BugRejectedCVE):
  Mark as not-for-us.
(FileBase.rawRecords):
  Mark all un-annotated bugs after STOP: field as not-for-us.

lib/python/security_db.py (DB.initSchema):
  Add table bugs_status.
(DB.finishBugs):
  Run to completion even if there are conflicting CAN/CVE entries.
(DB.getVersion, calculateVulnerabilities):
  New methods.
(test):
  Update.

lib/python/debian_support.py (Version):
  Add a type check.

Makefile:
  Add stamps/calc-vulns target.

bin/update-packages:
  Fix typo in comment.

Revision 1947 - Directory Listing
Modified Tue Sep 13 09:12:19 2005 UTC (7 years, 9 months ago) by fw
Add support for downloading Packages and Sources files.

After this change, you must run "make clean update-packages all" to
download the package data.

lib/python/security_db.py(DB.initSchema):
  Add table inodeprints.
(DB.filePrint, DB._maybeUpdate, DB.maybeUpdateSources,
DB.maybeUpdatePackages):
  Add.
(test):
  Update to new file locations.

bin/update-packages:
  New file.  Used by the makefile.

data/packages:
  New directory.  Used to store the downloaded files.

Makefile:
  Add "update-packages" and "clean" targets, and the necessary targets
  to support them.

Revision 1943 - Directory Listing
Modified Tue Sep 13 07:45:17 2005 UTC (7 years, 9 months ago) by fw
bin/apt-update-file:
  Remove unnecessary import.

lib/python/debian_support.py (listReleases):
  Add "sid".
(replaceFile):
  Remove temporary file on exception.
(updateFile):
  The file constructor raises IOError if the file does not exist.
  urllib does not raise a proper exception on 4xx errors.
  Handle varying whitespace in SHA1-Current field.

Revision 1939 - Directory Listing
Modified Mon Sep 12 20:08:46 2005 UTC (7 years, 9 months ago) by fw
lib/python/debian_support.py:
  Add support for downloading package file diffs.

bin/apt-update-file:
  Driver script for the new functionality.

(I will use this functionality to implement package database
replication.  The goal is to keep a local copy of all the interesting
data, so that we no longer need to consult madison etc.)

Revision 1937 - Directory Listing
Modified Mon Sep 12 17:12:08 2005 UTC (7 years, 9 months ago) by fw
lib/python/debian_support.py (ParseError):
  Add class.

lib/python/debian_support.py (PackageFile.raiseSyntaxError):o
  Raise ParseError instead of SyntaxError.

bin/check-syntax, bin/update-bug-list-db:
  Handle the ParseError exception gracefully.

lib/python/bugs.py (CVEFile.matchHeader):
  Check parentheses/brackets.

data/CAN/list:
  Fix uncovered syntax errors.

Revision 1936 - Directory Listing
Modified Mon Sep 12 16:46:36 2005 UTC (7 years, 9 months ago) by fw
lib/python/security_db.py (DB.finishBugs):
   Fix reporting of consistency check failures.

bin/update-bug-list-db:
   Do not print "error: " prefixes.

Revision 1934 - Directory Listing
Modified Mon Sep 12 16:32:23 2005 UTC (7 years, 9 months ago) by fw
Add list parser written in Python.

"make check" runs a syntax check (no SQLite required).  "make all"
updates the SQLite database, and performs cross-list consistency checks.

There is some support for loading Debian Package/Sources files, but this
information is currently not used by the checks.

Revision 1902 - Directory Listing
Modified Sat Sep 10 15:58:27 2005 UTC (7 years, 9 months ago) by joeyh
remove unimportant from the key

Revision 1900 - Directory Listing
Modified Sat Sep 10 14:53:32 2005 UTC (7 years, 9 months ago) by joeyh
don't display unimportant issues

Revision 1889 - Directory Listing
Modified Fri Sep 9 22:01:18 2005 UTC (7 years, 9 months ago) by joeyh
typos

Revision 1888 - Directory Listing
Modified Fri Sep 9 22:00:01 2005 UTC (7 years, 9 months ago) by joeyh
show DTSA fixed issues in green

Revision 1887 - Directory Listing
Modified Fri Sep 9 21:49:35 2005 UTC (7 years, 9 months ago) by joeyh
deal with moritz's new not-afected thing

Revision 1838 - Directory Listing
Modified Wed Sep 7 16:12:45 2005 UTC (7 years, 9 months ago) by joeyh
website and archive url changes

Revision 1815 - Directory Listing
Modified Sun Sep 4 21:08:50 2005 UTC (7 years, 9 months ago) by neilm
Now doesn't ignore last item in DTSA/list

Revision 1809 - Directory Listing
Modified Sun Sep 4 19:22:24 2005 UTC (7 years, 9 months ago) by joeyh
add links to DTSA pages

Revision 1794 - Directory Listing
Modified Sat Sep 3 13:30:06 2005 UTC (7 years, 9 months ago) by neilm
Web listings of DTSAs now available

Revision 1772 - Directory Listing
Modified Thu Sep 1 20:24:57 2005 UTC (7 years, 9 months ago) by joeyh
one more warning

Revision 1771 - Directory Listing
Modified Thu Sep 1 20:13:16 2005 UTC (7 years, 9 months ago) by joeyh
fix $id scoping

Revision 1770 - Directory Listing
Modified Thu Sep 1 20:04:41 2005 UTC (7 years, 9 months ago) by joeyh
work around further warnings for recording stuff with no item ids

Revision 1769 - Directory Listing
Modified Thu Sep 1 19:58:54 2005 UTC (7 years, 9 months ago) by joeyh
another bug caught by strict

Revision 1768 - Directory Listing
Modified Thu Sep 1 19:37:48 2005 UTC (7 years, 9 months ago) by joeyh
fix a warning on undefined item

Revision 1767 - Directory Listing
Modified Thu Sep 1 19:34:16 2005 UTC (7 years, 9 months ago) by joeyh
fix a wrong comment

Revision 1766 - Directory Listing
Modified Thu Sep 1 19:31:46 2005 UTC (7 years, 9 months ago) by joeyh
remove /tmp race

Revision 1765 - Directory Listing
Modified Thu Sep 1 19:29:08 2005 UTC (7 years, 9 months ago) by joeyh
make warning and strict safe

Revision 1763 - Directory Listing
Modified Thu Sep 1 17:50:06 2005 UTC (7 years, 9 months ago) by neilm
Now it actually dows work with DTSAs.

Revision 1750 - Directory Listing
Modified Wed Aug 31 16:53:15 2005 UTC (7 years, 9 months ago) by neilm
Added DTSA checking

Revision 1695 - Directory Listing
Modified Sun Aug 28 15:42:56 2005 UTC (7 years, 9 months ago) by joeyh
newline

Revision 1693 - Directory Listing
Modified Sun Aug 28 15:31:24 2005 UTC (7 years, 9 months ago) by joeyh
output improvements

Revision 1692 - Directory Listing
Modified Sun Aug 28 15:29:17 2005 UTC (7 years, 9 months ago) by joeyh
fix

Revision 1691 - Directory Listing
Modified Sun Aug 28 15:27:40 2005 UTC (7 years, 9 months ago) by joeyh
fixes

Revision 1690 - Directory Listing
Modified Sun Aug 28 15:21:10 2005 UTC (7 years, 9 months ago) by joeyh
maybe it will work now...

Revision 1689 - Directory Listing
Modified Sun Aug 28 14:59:13 2005 UTC (7 years, 9 months ago) by joeyh
drop the sudo, it will run as katie

Revision 1680 - Directory Listing
Modified Sat Aug 27 19:26:24 2005 UTC (7 years, 9 months ago) by joeyh
add change minimisation code

Revision 1679 - Directory Listing
Modified Sat Aug 27 19:12:28 2005 UTC (7 years, 9 months ago) by joeyh
and some more..

Revision 1678 - Directory Listing
Modified Sat Aug 27 19:11:31 2005 UTC (7 years, 9 months ago) by joeyh
let's try to make it actually work..

Revision 1677 - Directory Listing
Modified Sat Aug 27 19:05:18 2005 UTC (7 years, 9 months ago) by joeyh
forgot glob

Revision 1676 - Directory Listing
Modified Sat Aug 27 18:59:54 2005 UTC (7 years, 9 months ago) by joeyh
added dtsasync

Revision 1672 - Directory Listing
Added Sat Aug 27 17:07:18 2005 UTC (7 years, 9 months ago) by joeyh
Moved programs into bin directory so data can be auto-updated w/o opening
any potential holes for committers who lack access to the machine running
the update. AKA my paranioa finally caught up to me.

Didn't move DTSA still since it will be rewritten anyway.

  ViewVC Help
Powered by ViewVC 1.1.5