[Git][security-tracker-team/security-tracker][master] lts-cve-triage: use correct debian-security-support branch

Emilio Pozuelo Monfort (@pochu) pochu at debian.org
Tue May 30 11:24:03 BST 2023



Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
20f0b653 by Emilio Pozuelo Monfort at 2023-05-30T12:16:14+02:00
lts-cve-triage: use correct debian-security-support branch

We were downloading files from master instead of the suite branch,
so e.g. python2.7 was marked as limited support when it's still
supported in buster.

- - - - -


2 changed files:

- bin/lts-cve-triage.py
- bin/unsupported_packages.py


Changes:

=====================================
bin/lts-cve-triage.py
=====================================
@@ -99,7 +99,8 @@ args = parser.parse_args()
 tracker = TrackerData(update_cache=not args.skip_cache_update)
 unsupported = UnsupportedPackages(codename=RELEASES['lts'],
                                   update_cache=not args.skip_cache_update)
-limited = LimitedSupportPackages(update_cache=not args.skip_cache_update)
+limited = LimitedSupportPackages(codename=RELEASES['lts'],
+                                 update_cache=not args.skip_cache_update)
 # unsupport/limited package names can be regexps
 unsupported_re = re.compile('|'.join(unsupported))
 limited_re = re.compile('|'.join(limited))


=====================================
bin/unsupported_packages.py
=====================================
@@ -49,7 +49,7 @@ class DebSecSupport(set):
 
 
 class UnsupportedPackages(DebSecSupport):
-    URL = "https://salsa.debian.org/debian/debian-security-support/raw/master/security-support-ended.deb{}"
+    URL = "https://salsa.debian.org/debian/debian-security-support/raw/{}/security-support-ended.deb{}"
     CACHED_DATA_PATH = "~/.cache/security-support-ended.deb{}"
 
     def __init__(self, codename, update_cache=True):
@@ -57,7 +57,7 @@ class UnsupportedPackages(DebSecSupport):
         dists = list(config.get_config().keys())
         self.debian_version = dists.index(codename) + 1
 
-        self.url = self.URL.format(self.debian_version)
+        self.url = self.URL.format(codename, self.debian_version)
 
         self.cache = os.path.expanduser(self.CACHED_DATA_PATH).format(
             self.debian_version,
@@ -67,10 +67,10 @@ class UnsupportedPackages(DebSecSupport):
 
 
 class LimitedSupportPackages(DebSecSupport):
-    URL = "https://salsa.debian.org/debian/debian-security-support/raw/master/security-support-limited"
+    URL = "https://salsa.debian.org/debian/debian-security-support/raw/{}/security-support-limited"
     CACHED_DATA_PATH = "~/.cache/security-support-limited"
 
-    def __init__(self, update_cache=True):
-        self.url = self.URL
+    def __init__(self, codename, update_cache=True):
+        self.url = self.URL.format(codename)
         self.cache = os.path.expanduser(self.CACHED_DATA_PATH)
         super(LimitedSupportPackages, self).__init__(update_cache)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/20f0b653ee78c80c5faa849b2c3f0fcc50479fa4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/20f0b653ee78c80c5faa849b2c3f0fcc50479fa4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230530/fcdbabed/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list