[Secure-testing-commits] r50252 - bin
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Sat Apr 1 19:27:02 UTC 2017
Author: carnil
Date: 2017-04-01 19:27:02 +0000 (Sat, 01 Apr 2017)
New Revision: 50252
Modified:
bin/report-vuln
Log:
report-vuln: support reporting against source package
Modified: bin/report-vuln
===================================================================
--- bin/report-vuln 2017-04-01 19:06:01 UTC (rev 50251)
+++ bin/report-vuln 2017-04-01 19:27:02 UTC (rev 50252)
@@ -113,7 +113,7 @@
return ret + '\n'
-def gen_text(pkg, cveid, blanks=False, severity=None, affected=None, cc=False, cclist=None):
+def gen_text(pkg, cveid, blanks=False, severity=None, affected=None, cc=False, cclist=None, src=False):
vuln_suff = 'y'
cve_suff = ''
time_w = 'was'
@@ -124,7 +124,11 @@
vuln_suff = 'ies'
time_w = 'were'
- header = '''Package: %s\n''' % (pkg)
+ if src:
+ header = '''Source: %s\n''' % (pkg)
+ else:
+ header = '''Package: %s\n''' % (pkg)
+
if affected is None:
if blanks:
header += "Version: FILLINAFFECTEDVERSION\n"
@@ -207,6 +211,7 @@
help='add X-Debbugs-CC header to')
parser.add_argument('--cc-list', dest='cclist', default=['team at security.debian.org', 'secure-testing-team at lists.alioth.debian.org'],
help='list of addresses to add in CC (default: %(default)s)')
+ parser.add_argument('--src', action="store_true", help='report against source package')
parser.add_argument('pkg', help='affected package')
parser.add_argument('cve', nargs='+', help='relevant CVE for this source package, may be used multiple time if the issue has multiple CVEs')
args = parser.parse_args()
@@ -226,7 +231,7 @@
if not c.match(arg) and not temp_id.match(arg):
error(arg + ' does not seem to be a valid CVE id')
- gen_text(pkg, cve, affected=args.affected, blanks=args.blanks, severity=args.severity, cc=args.cc, cclist=args.cclist)
+ gen_text(pkg, cve, affected=args.affected, blanks=args.blanks, severity=args.severity, cc=args.cc, cclist=args.cclist, src=args.src)
if __name__ == '__main__':
main()
More information about the Secure-testing-commits
mailing list