Ubuntu CVE Tracker

cve_lib patches structure

Bug #1892523 reported by Albert Kolozsvari on 2020-08-21

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	Ubuntu CVE Tracker	Fix Released	Undecided	Alex Murray

Bug Description

I working with `scripts/cve_lib.py`. I am trying to fetch the CVE's tags and patches and send them to ubuntu.com.

I couldn't help noticing the different way `cve_lib` returns `tags` (or `pkg`) and how it returns `patches`.

I am using CVE-2012-4542 as an example.

Tags are returned nicely like this:
```
'tags': {
    'linux-armadaxp': {'not-ue'},
    'linux-lts-quantal': {'not-ue'},
    'linux-lts-saucy': {'not-ue'}
},
```

While patches are separate items of the cve dict:
```
'Patches_linux-ec2': '',
'Patches_linux-mvl-dove': '',
'Patches_linux-ti-omap4': '',
'Patches_linux-lts-backport-maverick': '',
'Patches_linux-fsl-imx51': '',
'Patches_linux-lts-backport-oneiric': '',
'Patches_linux-linaro-omap': '',
'Patches_linux-linaro-shared': '',
'Patches_linux-linaro-vexpress': '',
'Patches_linux-qcm-msm': '',
'Patches_linux-armadaxp': '',
'Patches_linux-lts-quantal': 'DNE',
```

It would be nice if patches would follow a similar structure as tags:
```
'patches': {
    'linux-ec2': {''},
    'linux-mvl-dove': {''},
    'linux-ti-omap4': {''}
},
```

See original description

Related branches

~alexmurray/ubuntu-cve-tracker:parse-patches-for-lp-1892523

Merged into ubuntu-cve-tracker:master at revision fc1f947b23c1bfe73caa112ef879561b03115b7b

Steve Beattie: Approve on 2021-09-21

Albert Kolozsvari: Pending requested 2021-09-21

Diff: 2426 lines (+673/-190)

132 files modified

active/00boilerplate.firefox (+1/-1)
active/00boilerplate.mozjs (+8/-8)
active/CVE-2011-2896 (+1/-2)
active/CVE-2011-3170 (+1/-2)
active/CVE-2017-13803 (+1/-1)
active/CVE-2018-4133 (+1/-1)
active/CVE-2018-4233 (+1/-1)
active/CVE-2018-4299 (+1/-1)
active/CVE-2018-4359 (+1/-1)
active/CVE-2019-8611 (+1/-1)
active/CVE-2019-8622 (+1/-1)
active/CVE-2019-8623 (+1/-1)
active/CVE-2020-15660 (+1/-1)
active/CVE-2020-21913 (+1/-1)
active/CVE-2021-23963 (+1/-1)
active/CVE-2021-23964 (+1/-1)
active/CVE-2021-23968 (+1/-1)
active/CVE-2021-23969 (+1/-1)
active/CVE-2021-23970 (+1/-1)
active/CVE-2021-23971 (+1/-1)
active/CVE-2021-23972 (+1/-1)
active/CVE-2021-23973 (+1/-1)
active/CVE-2021-23974 (+1/-1)
active/CVE-2021-23975 (+1/-1)
active/CVE-2021-23976 (+1/-1)
active/CVE-2021-23977 (+1/-1)
active/CVE-2021-23978 (+1/-1)
active/CVE-2021-23979 (+1/-1)
active/CVE-2021-23981 (+1/-1)
active/CVE-2021-23982 (+1/-1)
active/CVE-2021-23983 (+1/-1)
active/CVE-2021-23984 (+1/-1)
active/CVE-2021-23985 (+1/-1)
active/CVE-2021-23986 (+1/-1)
active/CVE-2021-23987 (+1/-1)
active/CVE-2021-23988 (+1/-1)
active/CVE-2021-23994 (+1/-1)
active/CVE-2021-23995 (+1/-1)
active/CVE-2021-23996 (+1/-1)
active/CVE-2021-23997 (+1/-1)
active/CVE-2021-23998 (+1/-1)
active/CVE-2021-23999 (+1/-1)
active/CVE-2021-24000 (+1/-1)
active/CVE-2021-24001 (+1/-1)
active/CVE-2021-24002 (+1/-1)
active/CVE-2021-29945 (+1/-1)
active/CVE-2021-29946 (+1/-1)
active/CVE-2021-29947 (+1/-1)
active/CVE-2021-29952 (+1/-1)
active/CVE-2021-29955 (+1/-1)
active/CVE-2021-29959 (+1/-1)
active/CVE-2021-29960 (+1/-1)
active/CVE-2021-29961 (+1/-1)
active/CVE-2021-29962 (+1/-1)
active/CVE-2021-29963 (+1/-1)
active/CVE-2021-29964 (+1/-1)
active/CVE-2021-29965 (+1/-1)
active/CVE-2021-29966 (+1/-1)
active/CVE-2021-29967 (+1/-1)
active/CVE-2021-29968 (+1/-1)
active/CVE-2021-29970 (+1/-1)
active/CVE-2021-29971 (+1/-1)
active/CVE-2021-29972 (+1/-1)
active/CVE-2021-29973 (+1/-1)
active/CVE-2021-29974 (+1/-1)
active/CVE-2021-29975 (+1/-1)
active/CVE-2021-29976 (+1/-1)
active/CVE-2021-29977 (+1/-1)
active/CVE-2021-29980 (+1/-1)
active/CVE-2021-29981 (+1/-1)
active/CVE-2021-29982 (+1/-1)
active/CVE-2021-29983 (+1/-1)
active/CVE-2021-29984 (+1/-1)
active/CVE-2021-29985 (+1/-1)
active/CVE-2021-29986 (+1/-1)
active/CVE-2021-29987 (+1/-1)
active/CVE-2021-29988 (+1/-1)
active/CVE-2021-29989 (+1/-1)
active/CVE-2021-29990 (+1/-1)
active/CVE-2021-29991 (+1/-1)
active/CVE-2021-38491 (+1/-1)
active/CVE-2021-38492 (+1/-1)
active/CVE-2021-38493 (+1/-1)
active/CVE-2021-38494 (+1/-1)
ignored/CVE-2021-29953 (+1/-1)
retired/CVE-2011-4330 (+1/-1)
retired/CVE-2014-1739 (+1/-1)
retired/CVE-2014-2580 (+1/-1)
retired/CVE-2014-4508 (+1/-1)
retired/CVE-2014-7843 (+1/-1)
retired/CVE-2015-6252 (+1/-1)
retired/CVE-2015-7799 (+1/-1)
retired/CVE-2015-8543 (+1/-1)
retired/CVE-2016-1784 (+1/-1)
retired/CVE-2016-2143 (+1/-1)
retired/CVE-2016-4735 (+1/-1)
retired/CVE-2016-7039 (+1/-1)
retired/CVE-2016-7598 (+1/-1)
retired/CVE-2017-0794 (+1/-1)
retired/CVE-2017-10810 (+1/-1)
retired/CVE-2017-12134 (+1/-1)
retired/CVE-2017-14106 (+1/-1)
retired/CVE-2017-7482 (+1/-1)
retired/CVE-2017-7645 (+1/-1)
retired/CVE-2017-7895 (+1/-1)
retired/CVE-2017-7979 (+1/-1)
retired/CVE-2018-5344 (+1/-1)
retired/CVE-2018-7566 (+1/-1)
retired/CVE-2020-16048 (+1/-1)
scripts/check-syntax (+29/-16)
scripts/cve_lib.py (+20/-3)
scripts/html_export.py (+5/-12)
scripts/publish-cves-to-website-api.py (+1/-3)
scripts/report-pending-fixes (+4/-6)
scripts/sync-bugs-kernel.py (+16/-23)
scripts/test_cve_lib.py (+2/-0)
test/okay/cve-id-N7.json (+3/-1)
test/okay/cve-id-NNNN.json (+3/-1)
test/okay/patches-missing-1 (+26/-0)
test/okay/patches-missing-1.json (+54/-0)
test/okay/patches-missing-2 (+35/-0)
test/okay/patches-missing-2.json (+88/-0)
test/okay/patches-missing-3 (+36/-0)
test/okay/patches-missing-3.json (+90/-0)
test/okay/patches-missing-4 (+36/-0)
test/okay/patches-missing-4.json (+90/-0)
test/okay/priority-critical.json (+3/-1)
test/okay/priority-high.json (+3/-1)
test/okay/priority-low.json (+3/-1)
test/okay/priority-medium.json (+4/-2)
test/okay/priority-negligible.json (+3/-1)
test/okay/priority-untriaged.json (+3/-1)

Albert Kolozsvari (albertkol) on 2020-08-21

description:

updated

Revision history for this message

Alex Murray (alexmurray) wrote on 2021-09-21:

Proposed fix in https://code.launchpad.net/~alexmurray/ubuntu-cve-tracker/+git/ubuntu-cve-tracker-1/+merge/408919

Changed in ubuntu-cve-tracker:
status:	New → In Progress
assignee:	nobody → Alex Murray (alexmurray)

Revision history for this message

Steve Beattie (sbeattie) wrote on 2021-09-29:

This fix was landed in https://git.launchpad.net/ubuntu-cve-tracker/commit/?id=fc1f947b23c1bfe73caa112ef879561b03115b7b , closing.

Thanks for the report and the suggestion. Please let us know if there are other ways we can improve the parsed structure for you or other issues you run across.

Changed in ubuntu-cve-tracker:
status:	In Progress → Fix Released

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.