[Git][security-tracker-team/security-tracker][master] 2 commits: security_db: don't list undetermined issues for unreported vulns

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
52b0ee08 by Emilio Pozuelo Monfort at 2026-10-29T17:32:05+01:00
security_db: don't list undetermined issues for unreported vulns

In general, we don't want to file bugs if it's not clear if a CVE
applies or not.

Fixes: #55

- - - - -
d7800c7c by Salvatore Bonaccorso at 2026-10-29T21:26:33+01:00
Merge branch 'dont-list-undetermined-issues' into 'master'

security_db: don't list undetermined issues for unreported vulns

Closes #55

See merge request security-tracker-team/security-tracker!338
- - - - -


1 changed file:

- lib/python/security_db.py


Changes:

=====================================
lib/python/security_db.py
=====================================
@@ -2311,7 +2311,7 @@ f"""SELECT DISTINCT source_package_status.bug_name, source_packages.name
   WHERE source_package_status.bug_name LIKE 'CVE-%'
   AND package_notes.urgency <> 'unimportant'
   AND package_notes.rowid NOT IN (SELECT note FROM debian_bugs)
-  AND source_package_status.vulnerable
+  AND source_package_status.vulnerable = {Vulnerable.AFFECTED}
   AND ({show_ignored} OR NOT EXISTS (SELECT * FROM ignored_packages WHERE ignored_packages.name = source_packages.name))
   ORDER BY source_package_status.bug_name, source_packages.name"""):
             if last_bug is None or last_bug != bug:



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/e1409adb0e5210cc6dab27cbd0bc028b4577a7a0...d7800c7c38fdca819f76d76751464cec6b19ec62

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/e1409adb0e5210cc6dab27cbd0bc028b4577a7a0...d7800c7c38fdca819f76d76751464cec6b19ec62
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/a53d6fdf/attachment.htm>