~alexmurray/ubuntu-cve-tracker:restore-release-stamps-and-sort-instead-by-release-version

Branch merges

Propose for merging

Merged into ubuntu-cve-tracker:master at revision 0ac376a38675ad0addf59403120770b5391ed150

Emilia Torino: Approve on 2023-03-31

Steve Beattie: Pending requested 2023-03-30

Ubuntu Security Team: Pending requested 2023-03-30

Diff: 442 lines (+77/-13)

2 files modified

scripts/cve_lib.py (+75/-10)
scripts/test_cve_lib.py (+2/-3)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related charm recipes

1ba8458... by Alex Murray on 2023-04-03

scripts/test_cve_lib.py: remove debug print from test_release_sort

Signed-off-by: Alex Murray <email address hidden>

tests:0 (build)

1 → 1 of 1 result

First • Previous • Next • Last

c6ee42e... by Alex Murray on 2023-03-30

scripts/cve_lib.py: sort by release version rather than stamp

We want sub-releases to sort with their parent release but their release stamp
is often much later (ie. esm-apps for xenial was released quite a while after
xenial itself). So instead sort based on the version of the release (or it's
parent) rather than the release stamp.

Signed-off-by: Alex Murray <email address hidden>

tests:0 (build)

1 → 1 of 1 result

First • Previous • Next • Last

8666bad... by Alex Murray on 2023-03-30

script/cve_lib.py: restore release stamps removed in 90fc7929bf1

This broke various other tooling that used this - instead will try a different
approach to release name sorting based on release version, as suggested by
sbeattie

Signed-off-by: Alex Murray <email address hidden>

f16ab15... by Alex Murray on 2023-03-30

scripts/cve-mode.el: append any note to patches when downloading

If a patch is listed as say:

  upstream: https://github.com/foo/bar/commit/12345 (note)

Then when downloading this, name the patch:

  CVE-YYYY-NNNN-note-I.patch

where I is the count of patches in the CVE file.

Signed-off-by: Alex Murray <email address hidden>

79f6aa4... by Rodrigo Figueiredo Zaiden on 2023-03-30

CVE-2022-39188: kernel: add notes for 5.4 kernels

Signed-off-by: Rodrigo Figueiredo Zaiden <email address hidden>

c5b8b21... by Rodrigo Figueiredo Zaiden on 2023-03-30

merge cve updates from kernel team

Signed-off-by: Rodrigo Figueiredo Zaiden <email address hidden>

027c0c8... by Paulo Flabiano Smorigo on 2023-03-30

xcftools update released

Signed-off-by: Paulo Flabiano Smorigo <email address hidden>

b62c339... by Thadeu Lima de Souza Cascardo on 2023-03-30

kernel/CVE-2022-4744: autotriage

Signed-off-by: Thadeu Lima de Souza Cascardo <email address hidden>

8176456... by Thadeu Lima de Souza Cascardo on 2023-03-30

kernel/CVE-2022-39188: autotriage

Signed-off-by: Thadeu Lima de Souza Cascardo <email address hidden>

d923801... by Marc Deslauriers on 2023-03-30

added samba CVEs