summaryrefslogtreecommitdiffstats
path: root/bin
diff options
context:
space:
mode:
authorSylvain Beucler <beuc@beuc.net>2022-04-21 08:56:58 +0200
committerSylvain Beucler <beuc@beuc.net>2022-04-21 08:56:58 +0200
commit22d869d989da3d4fa8ae376b5a69fcf5c8367da2 (patch)
treef05c7659e2f42404beb7a6ad31577c44c7ae2b78 /bin
parentba251893f191816475def485b340c238e4f8aef4 (diff)
lts-cve-triage: track buster/stable updates suited for LTS
(re-committed with proper authorship and commit information) See https://lists.debian.org/debian-lts/2022/04/msg00011.html
Diffstat (limited to 'bin')
-rwxr-xr-xbin/lts-cve-triage.py13
1 files changed, 13 insertions, 0 deletions
diff --git a/bin/lts-cve-triage.py b/bin/lts-cve-triage.py
index bda1606819..6590f975a5 100755
--- a/bin/lts-cve-triage.py
+++ b/bin/lts-cve-triage.py
@@ -64,6 +64,9 @@ LIST_NAMES = (
('triage_possible_easy_fixes',
('Issues not yet triaged for {lts}, but already fixed in {next_lts}')
.format(**RELEASES)),
+ ('triage_possible_missed_fixes',
+ ('Issues postponed for {lts}, but fixed in {next_lts} via DSA or point releases')
+ .format(**RELEASES)),
('triage_other_not_triaged_in_next_lts',
('Other issues to triage for {lts} (not yet triaged for {next_lts})')
.format(**RELEASES)),
@@ -154,10 +157,20 @@ for pkg in tracker.iterate_packages():
if status_in_next_lts.status == 'resolved':
add_to_list('possible_easy_fixes', pkg, issue)
+ # <no-dsa>/<postponed>/<ignored>/<unimportant>/<undetermined>
elif status_in_lts.status == 'ignored':
if (status_in_lts.reason == 'no-dsa' and
status_in_next_lts.status == 'open'):
add_to_list('unexpected_nodsa', pkg, issue)
+ elif (status_in_lts.reason == 'no-dsa' and
+ status_in_next_lts.status == 'resolved'):
+ # include fixes from DSA or stable/oldstable point releases
+ # exclude issues explicitly ignored, and old fixes back in unstable
+ nodsa_reason = issue.data['releases'][RELEASES['lts']]['nodsa_reason']
+ fixed_version = issue.data['releases'][RELEASES['next_lts']]['fixed_version']
+ if (nodsa_reason != 'ignored' and
+ ('~deb' in fixed_version or '+deb' in fixed_version)):
+ add_to_list('triage_possible_missed_fixes', pkg, issue)
elif status_in_lts.reason == 'undetermined':
add_to_list('undetermined', pkg, issue)

© 2014-2024 Faster IT GmbH | imprint | privacy policy