[Git][security-tracker-team/security-tracker][dont-list-undetermined-issues] security_db: don't list undetermined issues for unreported vulns

[Emilio Pozuelo Monfort (@pochu)]

Emilio Pozuelo Monfort pushed to branch dont-list-undetermined-issues at Debian Security Tracker / security-tracker


Commits:
52b0ee08 by Emilio Pozuelo Monfort at 2026-10-29T17:32:05+01:00
security_db: don't list undetermined issues for unreported vulns

In general, we don't want to file bugs if it's not clear if a CVE
applies or not.

Fixes: #55

- - - - -


1 changed file:

- lib/python/security_db.py


Changes:

=====================================
lib/python/security_db.py
=====================================
@@ -2311,7 +2311,7 @@ f"""SELECT DISTINCT source_package_status.bug_name, source_packages.name
   WHERE source_package_status.bug_name LIKE 'CVE-%'
   AND package_notes.urgency <> 'unimportant'
   AND package_notes.rowid NOT IN (SELECT note FROM debian_bugs)
-  AND source_package_status.vulnerable
+  AND source_package_status.vulnerable = {Vulnerable.AFFECTED}
   AND ({show_ignored} OR NOT EXISTS (SELECT * FROM ignored_packages WHERE ignored_packages.name = source_packages.name))
   ORDER BY source_package_status.bug_name, source_packages.name"""):
             if last_bug is None or last_bug != bug:



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/52b0ee0849c174dd1ed4c1cf9160fcc1782658ae

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/52b0ee0849c174dd1ed4c1cf9160fcc1782658ae
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/84a806ed/attachment-0001.htm>