[Git][security-tracker-team/security-tracker][master] security_db: fix releasepart_to_number on non-main

Emilio Pozuelo Monfort (@pochu) pochu at debian.org
Wed Jun 16 17:25:57 BST 2021



Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0242bb96 by Emilio Pozuelo Monfort at 2021-06-16T18:25:26+02:00
security_db: fix releasepart_to_number on non-main

For releases with a component (e.g. buster/non-free),
releasepart_to_number was not spliting the component. This
was causing bad sorting on CVE pages for packages in contrib
or non-free.

- - - - -


1 changed file:

- lib/python/security_db.py


Changes:

=====================================
lib/python/security_db.py
=====================================
@@ -592,7 +592,10 @@ class DB:
         def releasepart_to_number(r):
             # expects a string in the form "codename (security)"
             try:
+                # split the (optional) subrelease
                 u=r.split()[0]
+                # split the (optional) component
+                u=u.split('/')[0]
                 return release_to_number(u)
             except ValueError:
                 return -1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0242bb96fe48ad5acfe86c1c86608f2ddf709cbd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0242bb96fe48ad5acfe86c1c86608f2ddf709cbd
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210616/17a0ab0f/attachment.htm>


More information about the debian-security-tracker-commits mailing list