Ubuntu CVE Tracker

~sbeattie/ubuntu-cve-tracker:generate-oval-branch

  1. Git
  2. lp:~sbeattie/ubuntu-cve-tracker
  3. generate-oval-branch
Last commit made on 2019-05-02
Get this branch:
git clone -b generate-oval-branch https://git.launchpad.net/~sbeattie/ubuntu-cve-tracker
Only Steve Beattie can upload to this branch. If you are Steve Beattie please log in for upload directions.

Branch merges

Branch information

Name:
generate-oval-branch
Repository:
lp:~sbeattie/ubuntu-cve-tracker

Recent commits

18a8ff7... by Steve Beattie

generate-oval: add binary packages from kernel meta and signed packages

Add the binary packages from supplemental source packages, namely the
kernel meta and signed packages.

Signed-off-by: Steve Beattie <email address hidden>

3555b74... by Steve Beattie

cve_lib: optionally quiet get_meta and get_signed warnings

Signed-off-by: Steve Beattie <email address hidden>

3c2a982... by Steve Beattie

kernel-abi-check: push abi functions into cve_lib.py

To make them available for other tools like generate-oval to use.

Signed-off-by: Steve Beattie <email address hidden>

fea59d6... by Steve Beattie

generate-oval: if debugging, write cache more frequently

Signed-off-by: Steve Beattie <email address hidden>

d4a407c... by Steve Beattie

generate-oval: wordsmith a bit the ignored comment

Signed-off-by: Steve Beattie <email address hidden>

b223cab... by Steve Beattie

oval_lib.py: increase the base ID number multiplier

Test IDs for a given CVE are generated from the base ID, which is
derived from the CVE, and then incremented fo each test condition.
However, some source packages generate hundreds of binary packages, and
some CVEs affect multiples of these source packages, resulting in
duplicate test IDs.

To work around this, we bump up the multiplier to 1000000; if we
ever have a CVE end up affecting source packages that result in more
than one million binary packages in a given release, we could again
get overlap, but that is an unlikely occurrence, given our releases
contain less than 100,000 binary packages.

Signed-off-by: Steve Beattie <email address hidden>

e1b6bd3... by Steve Beattie

generate-oval: cleanup some pylint whinges

Signed-off-by: Steve Beattie <email address hidden>

b6f72fd... by Steve Beattie

generate-oval: reduce frequency of flushing cache to disk

Signed-off-by: Steve Beattie <email address hidden>

ca9d7b9... by Steve Beattie

generate-oval: fix up pycodestyle issues

Signed-off-by: Steve Beattie <email address hidden>

a81f9c9... by Steve Beattie

generate-oval: re-order check

Signed-off-by: Steve Beattie <email address hidden>