Author: joeyh
Date: 2004-11-01 17:39:27 -0700 (Mon, 01 Nov 2004)
New Revision: 58
Added:
sarge-checks/README
sarge-checks/checklist
Removed:
sarge-checks/checklist.pl
sarge-checks/people
Log:
ad a readme, remove .pl, remove people list now that there is a real
mailing list
Added: sarge-checks/README
==================================================================---
sarge-checks/README 2004-11-02 00:00:34 UTC (rev 57)
+++ sarge-checks/README 2004-11-02 00:39:27 UTC (rev 58)
@@ -0,0 +1,30 @@
+The checklist program can be run on a system with madison available to
+check vulnerability info from the list files against what packages are in
+testing. So the various list files need a common, machine parsable format.
+That format is:
+
+[date] id description
+ {id id id}
+ UPCASE: test
+ - package version
+
+Without writing a format grammar, because this is really rather ad-hoc and
+probably will be replaced with something better:
+
+[date]
+ The date of the advisory in the form dd Mmm YYYY (01 Nov 2004).
+ Optional, only given for DSAs at the moment.
+id
+ DSA-nnn-n, CAN-YYY-nnnn, CVE-YYY-nnnn, etc
+description
+ Pretty much freeform description of the problem. Short and optional.
+ Generally only used for DSAs right now.
+{id id id}
+ This is used to link to other ids that describe the same hole.
+ Generally used to link DSAs to CAN''s and CVEs
+UPCASE
+ Any word in upper case, typically NOTE, HELP, TODO.
+ May be repeated for each entry.
+- package version
+ Indicates that the problem is fixed in the given version of the
+ package. May repeat for other packages.
Copied: sarge-checks/checklist (from rev 56, sarge-checks/checklist.pl)
==================================================================---
sarge-checks/checklist.pl 2004-11-01 22:35:44 UTC (rev 56)
+++ sarge-checks/checklist 2004-11-02 00:39:27 UTC (rev 58)
@@ -0,0 +1,42 @@
+#!/usr/bin/perl
+# Must run on a machine with madison.
+
+if (! @ARGV) {
+ die "usage: $0 list\n";
+}
+
+foreach my $list (@ARGV) {
+ if (-d $list) {
+ $list="$list/list";
+ }
+
+ open (IN, $list) || die "open $list: $!";
+ while (<IN>) {
+ chomp;
+ if (/^\[/) {
+ ($id)=m/((?:DSA|CAN|CVE)-.*?) /;
+ }
+ elsif (/^(DSA|CAN|CVE)-/) {
+ $id=$_;
+ }
+ elsif (/^\s+[!-]\s+(.*?)\s+(.*)$/) {
+ my $package=$1;
+ my $version=$2;
+ if ($version=~/unfixed/) {
+ print "$package $version for $id\n";
+ next;
+ }
+ my $maddy=`madison -s testing ''$package''`;
+ if (length $maddy) {
+ my @fields = split(/\s*\|\s*/, $maddy);
+ my $cmp=system("dpkg --compare-versions ''$fields[1]''
''>='' ''$version''");
+ if ($cmp != 0) {
+ print "$package $version needed, have $fields[1] for $id\n";
+ }
+ }
+ }
+ elsif (/HELP/) {
+ print $_." ($id)\n";
+ }
+ }
+}
Deleted: sarge-checks/checklist.pl
==================================================================---
sarge-checks/checklist.pl 2004-11-02 00:00:34 UTC (rev 57)
+++ sarge-checks/checklist.pl 2004-11-02 00:39:27 UTC (rev 58)
@@ -1,42 +0,0 @@
-#!/usr/bin/perl
-# Must run on a machine with madison.
-
-if (! @ARGV) {
- die "usage: $0 list\n";
-}
-
-foreach my $list (@ARGV) {
- if (-d $list) {
- $list="$list/list";
- }
-
- open (IN, $list) || die "open $list: $!";
- while (<IN>) {
- chomp;
- if (/^\[/) {
- ($id)=m/(DSA-.*?) /;
- }
- elsif (/^(CAN|CVE)-/) {
- $id=$_;
- }
- elsif (/^\s+[!-]\s+(.*?)\s+(.*)$/) {
- my $package=$1;
- my $version=$2;
- if ($version=~/unfixed/) {
- print "$package $version for $id\n";
- next;
- }
- my $maddy=`madison -s testing ''$package''`;
- if (length $maddy) {
- my @fields = split(/\s*\|\s*/, $maddy);
- my $cmp=system("dpkg --compare-versions ''$fields[1]''
''>='' ''$version''");
- if ($cmp != 0) {
- print "$package $version needed, have $fields[1] for $id\n";
- }
- }
- }
- elsif (/HELP/) {
- print $_." ($id)\n";
- }
- }
-}
Deleted: sarge-checks/people
==================================================================---
sarge-checks/people 2004-11-02 00:00:34 UTC (rev 57)
+++ sarge-checks/people 2004-11-02 00:39:27 UTC (rev 58)
@@ -1,20 +0,0 @@
-Joey Hess <joeyh@debian.org>
-Matt Zimmerman <mdz@debian.org>
-Bdale Garbee <bdale@debian.org>
-Chris Halls <halls@debian.org>
-Martin Schulze <joey@debian.org>
-Andreas Mueller <amu@tr.debian.net>
-Petter Reinholdtsen <pere@hungry.com>
-Martin Michlmayr <tbm@cyrius.com>
-Andreas Barth <aba@not.so.argh.org>
-Ernesto Hernandez-Novich <emhn@telcel.net.ve>
-Finn-Arne Johansen <faj@bzz.no>
-Djoumé SALVETTI <salvetti@crans.org>
-Steinar H. Gunderson <sesse@debian.org>
-Andres Salomon <dilinger@voxel.net>
-Baruch Even <baruch@ev-en.org>
-Thomas Wana <thomas@wana.at>
-martin f. krafft <madduck@debian.org>
-Paul Dwerryhouse <paul@dwerryhouse.com.au>
-Wartan Hachaturow <wart@debian.org>
-Stefan Fritsch <sfritsch@ph.tum.de>