Merge lp:~wgrant/ubuntu-cve-tracker/mainold into lp:~ubuntu-security/ubuntu-cve-tracker/master

[William Grant]

[lp:~wgrant/ubuntu-cve-tracker/mainold]

841. By Kees Cook on 2007-11-29

prepare to sync from USN database, update syntax and split out CVE loader

842. By Kees Cook on 2007-11-30

merge fujitsu's updates

843. By Kees Cook on 2007-11-30

added compiz, finished update logic

844. By Kees Cook on 2007-11-30

add list of reverted CVEs, give example in README, mark released CVEs

845. By Kees Cook on 2007-11-30

assign self to mono, perl

846. By Kees Cook on 2007-12-04

tweak dhcp entry a bit

847. By Kees Cook on 2007-12-04

merge from jdstrand

848. By Kees Cook on 2007-12-04

merge with fujitsu; small additional fixes; add --universe to report-todo

849. By Kees Cook on 2007-12-04

update report-todo-numbers to include universe report

850. By Jamie Strandboge on 2007-12-04

CVE-2007-4033: note about embedded t1lib
merge with kees
CVE-2007-4033: retiring since tetex-bin links to t1lib and its fixed
ignore database.pickle

851. By Kees Cook on 2007-12-05

merge tests

852. By Kees Cook on 2007-12-05

drop test changes

853. By Kees Cook on 2007-12-05

Merged and update

854. By Kees Cook on 2007-12-06

add new CVEs
update boilerplate to use "linux" source
add limited debian pulling logic to check-cves (next up: pushing!)

855. By Jamie Strandboge on 2007-12-07

CVE-2007-5935
CVE-2007-5936
CVE-2007-5937: updated with sync-from-usns.py

856. By Jamie Strandboge on 2007-12-07

Adjusted the following files so you don't have to by in the 'active' directory
any more. Unfortunately, this may break your aliases, but it makes it more
intuitive and easier to extend.
  scripts/active_edit
  scripts/cve_need_retire
  scripts/cve_packages
  scripts/cve_status
  scripts/pkg_status
  scripts/report-todo
  scripts/report-todo-numbers
  scripts/ubuntu-table
  scripts/verify-report.pl

README: updated to reflect path changes

scripts/cve_need_retire: add the '-p' option to show the full path to the
  cve, so we can still do cool bzr tricks

857. By Kees Cook on 2007-12-07

add CVE-2007-5497 (e2fsprogs)

858. By Jamie Strandboge on 2007-12-07

Embargo updates. See README for usage
 * active_edit, check-syntax, cve_lib.py, cve_status, pkg_status,
   ubuntu-table, and verify-report.pl all updated to support embargoed/
 * pkg_status and cve_status updated so don't hang if given an unsupported '-'
   option
 * added embargoed/ to .bzrignore (just so it doesn't show up in status)

859. By Jamie Strandboge on 2007-12-08

scripts:
 * Use EMB- instead of UEM- for embargoed items
 * Be more flexible with name format of EMB-

check-cves: actually write ~.check-cves.rc

860. By Jamie Strandboge on 2007-12-08

README: updated for new EMB- convention

861. By Jamie Strandboge on 2007-12-08

README: use -N to wget
active_edit and ubutnu-table: clean up EMB- regex

862. By Jamie Strandboge on 2007-12-08

allitems.xml.test: add a small cve db for testing
check-cves and active_edit: bug fixes for active/ migration

863. By Jamie Strandboge on 2007-12-08

added cves from check-cves
check-cves: string changes
cve_packages: move to using 'unimportant'
ubuntu-table: move to using 'unimportant'

864. By Jamie Strandboge on 2007-12-08

pkg_status: ignore grep output when checking package name

865. By Jamie Strandboge on 2007-12-10

rsync updates (CVE-2007-6199 and CVE-2007-6200)

866. By Jamie Strandboge on 2007-12-10

retired CVEs

867. By Jamie Strandboge on 2007-12-10

report-todo:
 * don't pass $@ to ubuntu-table as it doesn't work with WANTED
 * add support for '-S'

868. By Jamie Strandboge on 2007-12-10

CVE-2007-5398: new samba is in hardy now
report-todo: bugfix

869. By Jamie Strandboge on 2007-12-10

CVE-2007-1320: added URL and Description
cve_packages: add weights
README: more examples of how to use cve_packages

870. By Jamie Strandboge on 2007-12-10

cve_packages: add -S option (to skip 'devel')

871. By Jamie Strandboge on 2007-12-10

samba: note that debian is now regression free
libgd2: assign to me
rsync: unassign myself (can re-assign later)

872. By Kees Cook on 2007-12-10

Don't require that embargoed items be named EMB-
Clean up embargoed item handling in reports.

873. By Kees Cook on 2007-12-10

report embargoed items in check-cves