[Secure-testing-commits] r44581 - check-external

[Raphael Geissert]

Author: atomo64-guest
Date: 2016-09-14 10:00:00 +0000 (Wed, 14 Sep 2016)
New Revision: 44581

Modified:
   check-external/update.sh
Log:
Add another bugzilla-based source


Modified: check-external/update.sh
===================================================================
--- check-external/update.sh	2016-09-14 09:32:15 UTC (rev 44580)
+++ check-external/update.sh	2016-09-14 10:00:00 UTC (rev 44581)
@@ -46,7 +46,10 @@
 # but it is sufficient for now to get some additional CVE information
 # from Red Hat source
 wget -O redhat-bugzilla.html 'https://bugzilla.redhat.com/buglist.cgi?classification=Other&component=vulnerability&f1=alias&o1=regexp&product=Security%20Response&query_format=advanced&v1=^CVE-.*&order=priority%2Cbug_severity&limit=0'
-perl -ne 'print "$1\n" while (s/(CVE-[12][0-9]{3}-[0-9]{4,})//);' < redhat-bugzilla.html | sort -u > cve.list
+# Some extra data is readily available as an xml file
+wget -N https://www.redhat.com/security/data/metrics/cve-metadata-from-bugzilla.xml
+cat redhat-bugzilla.html cve-metadata-from-bugzilla.xml |
+perl -ne 'print "$1\n" while (s/(CVE-[12][0-9]{3}-[0-9]{4,})//);' | sort -u > cve.list
 check_list cve.list
 
 # List of issues fixed by each vendor, according to MITRE. Very