[Git][security-tracker-team/security-tracker][master] 2 commits: check-new-issues: use regexes for product entries

[Emilio Pozuelo Monfort (@pochu)]

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2a8d6863 by Emilio Pozuelo Monfort at 2026-09-28T14:18:59+02:00
check-new-issues: use regexes for product entries

Fixes: #56

- - - - -
9ba7ac8b by Emilio Pozuelo Monfort at 2026-09-28T14:19:49+02:00
nfu: use a regex for Apache Storm

- - - - -


2 changed files:

- bin/check-new-issues
- data/packages/nfu.yaml


Changes:

=====================================
bin/check-new-issues
=====================================
@@ -220,7 +220,7 @@ def nfu_entry_matches(nfu_entry, cve5):
         products = [ affected['product'] for affected in cve5['containers']['cna']['affected'] if 'product' in affected ]
         # only mark it if there's a single product, in case the CVE affects various
         # projects and one of the others applies to us
-        if 'product' in nfu_entry and len(products) == 1 and nfu_entry['product'] in products:
+        if 'product' in nfu_entry and len(products) == 1 and re.fullmatch(nfu_entry['product'], products[0]):
             return True
 
     if 'title' in nfu_entry:


=====================================
data/packages/nfu.yaml
=====================================
@@ -443,15 +443,7 @@
       - product: Apache Sling Security Bundle
       - product: Apache Sling XSS
       - product: Apache Spark
-      - product: Apache Storm Client
-      - product: Apache Storm DRPC
-      - product: Apache Storm Logviewer
-      - product: Apache Storm Nimbus
-      - product: Apache Storm Prometheus Reporter
-      - product: Apache Storm UI
-      - product: Apache Storm Webapp
-      - product: Apache Storm Worker
-      - product: Apache Storm Worker Launcher
+      - product: 'Apache Storm .*'
       - product: Apache StreamPark
       - product: Apache StreamPipes
       - product: Apache Superset



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/1faf4d1e8cd1cb84fdc87120485f9040809101f7...9ba7ac8b923b0bea2a398de7ea9c59d95b91d62f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/1faf4d1e8cd1cb84fdc87120485f9040809101f7...9ba7ac8b923b0bea2a398de7ea9c59d95b91d62f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260928/047cff2a/attachment-0001.htm>