~rodrigo-zaiden/ubuntu-cve-tracker:kernel_cna_cves_usn

Branch merges

Propose for merging

Ready for review for merging into ubuntu-cve-tracker:master

Alex Murray: Approve on 2024-04-08

Steve Beattie: Pending requested 2024-04-16

Diff: 458 lines (+302/-12)

8 files modified

README.linux (+7/-3)
meta_lists/kernel_paths_overrides.json (+93/-0)
scripts/cve_lib.py (+4/-6)
scripts/kernel_lib.py (+100/-1)
scripts/prepare-kernel-usn.py (+8/-1)
scripts/pull-usn-desc.py (+8/-0)
scripts/sis-generate-usn (+52/-0)
scripts/test_kernel_lib.py (+30/-1)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related charm recipes

6c3a721... by Rodrigo Figueiredo Zaiden on 2024-05-03

meta_lists/kernel_paths_overrides.json: add more subsystems

Signed-off-by: Rodrigo Figueiredo Zaiden <email address hidden>

	unit-tests:0 (build)
	check-cves:0 (build)
	check-cve-website-state:0 (build)

1 → 3 of 3 results

First • Previous • Next • Last

744be15... by Rodrigo Figueiredo Zaiden on 2024-04-23

meta_lists/kernel_paths_overrides.json: expand arch/

 instead of using the more generic arch/, expand the tree for the next
 level.

Signed-off-by: Rodrigo Figueiredo Zaiden <email address hidden>

ebd52c4... by Rodrigo Figueiredo Zaiden on 2024-04-16

scripts/test_kernel_lib.py: add condition to skip test

 if there is not configuration for the linux kernel tree, we should
 skip testing. that would be the case mainly for the servers, or,
 having the linux kernel tree would be the case only for local runs.
 not sure if that is something we could mock, don't really think so.

Signed-off-by: Rodrigo Figueiredo Zaiden <email address hidden>

e72bfae... by Rodrigo Figueiredo Zaiden on 2024-04-16

scripts/kernel_lib.py: add directory fallback

 while running the tests, noticed that the subsequent tests after
 the kernel ones were failing because the directory was being moved
 elsewhere. added a chdir to go back to the previous and added a test
 for the failure code path.

Signed-off-by: Rodrigo Figueiredo Zaiden <email address hidden>

0667c23... by Rodrigo Figueiredo Zaiden on 2024-04-16

scripts/test_kernel_lib.py: add tests for kernel cna cves methods

Signed-off-by: Rodrigo Figueiredo Zaiden <email address hidden>

c48b7bc... by Rodrigo Figueiredo Zaiden on 2024-04-16

scripts/kernel: move kernel-cna-cves methods to kernel_lib

 after a reconsideration, it would be better to start moving the kernel
 related methods to kernel_lib instead of over populating cve_lib.
 there is a few other methods related to kernel in cve_lib that should
 be moved later, for now, moving only the ones related to the new
 argument, --kernel-cna-cves.

Signed-off-by: Rodrigo Figueiredo Zaiden <email address hidden>

f16b003... by Rodrigo Figueiredo Zaiden on 2024-04-12

meta_lists/kernel_paths_overrides.json: add more subsystems

Signed-off-by: Rodrigo Figueiredo Zaiden <email address hidden>

56c577d... by Rodrigo Figueiredo Zaiden on 2024-04-05

scripts/cve_lib.py: trust that linux_cna_tracker is updated

 for the sake of performance, instead of falling back to a online search
 every time a CVE is not found in the kernel cna repo tracker, only
 fallback if the repository itself is not found.
 we will trust that the local repository is updated.

Signed-off-by: Rodrigo Figueiredo Zaiden <email address hidden>

39b463c... by Rodrigo Figueiredo Zaiden on 2024-04-05

scripts/cve_lib.py: move hardcode mapping to json file

 instead of using a hardcode mapping, it seems better to use a json
 file with the overrides, like we do for package names and titles,
 seems easier to view and cleaner to maintain.

Signed-off-by: Rodrigo Figueiredo Zaiden <email address hidden>

a70f0a6... by Rodrigo Figueiredo Zaiden on 2024-04-05

scripts/cve_lib.py: make load json file overrides more generic

 with the idea of using the method with other json files, this commit
 renames 'load_package_info_overrides' to 'load_json_file_overrides'

Signed-off-by: Rodrigo Figueiredo Zaiden <email address hidden>