102 lines
3.3 KiB
Python
102 lines
3.3 KiB
Python
import urllib.request
|
|
import json
|
|
import re
|
|
import datetime
|
|
|
|
TITLE_REGEX = r"\[(?P<date>\d+ \w+ \d{4})\] (?P<id>ELA-\d+-\d+) (?P<package>[\w\-\.]+) - (?P<type>[\w ]+)"
|
|
CVE_REGEX = r"CVE-\d{4}-\d{4,7}"
|
|
DETAILS_REGEX = r"\[(?P<codename>\w+)\] - (?P<package>[\w\-\.]+) (?P<version>(?:(?:[0-9]{1,9}):)?(?:[0-9][0-9a-z\.+~-]*)(?:(?:-[0-0a-z\.+~]+))?)"
|
|
|
|
DEBIAN_CODENAME = {
|
|
"bullseye": "11",
|
|
"buster": "10",
|
|
"stretch": "9",
|
|
"jessie": "8",
|
|
"wheezy": "7",
|
|
"squeeze": "6",
|
|
}
|
|
|
|
|
|
def fetch_ela_list():
|
|
url = "https://salsa.debian.org/freexian-team/extended-lts/security-tracker/-/raw/master/data/ELA/list"
|
|
response = urllib.request.urlopen(url)
|
|
return response.read().decode("utf-8")
|
|
|
|
|
|
def parse_date(s):
|
|
# '15 Jun 2018'
|
|
return datetime.datetime.strptime(s, "%d %b %Y")
|
|
|
|
|
|
def get_osv():
|
|
content = fetch_ela_list()
|
|
cves = None
|
|
details = []
|
|
data = None
|
|
for line in content.split("\n"):
|
|
line = line.strip()
|
|
m = re.match(TITLE_REGEX, line)
|
|
if m:
|
|
if cves and data and len(details) > 0:
|
|
yield {
|
|
"id": data["id"],
|
|
"modified": parse_date(data["date"]).isoformat("T") + "Z",
|
|
"related": cves,
|
|
"affected": [
|
|
{
|
|
"package": {
|
|
"ecosystem": f"Debian:{DEBIAN_CODENAME[r['codename']]}",
|
|
"name": r["package"],
|
|
"purl": f"pkg:deb/debian/{data['package']}?distro={r['codename']}&repository_url=http%3A%2F%2Fdeb.freexian.com%2Fextended-lts",
|
|
},
|
|
"ranges": {
|
|
"type": "ECOSYSTEM",
|
|
"events": [
|
|
{
|
|
"introduced": "0"
|
|
},
|
|
{
|
|
"fixed": r["version"],
|
|
}
|
|
],
|
|
},
|
|
}
|
|
for r in details
|
|
],
|
|
"database_specific": {"type": data["type"]},
|
|
"references": [
|
|
{
|
|
"type": "ADVISORY",
|
|
"url": f"https://deb.freexian.com/extended-lts/tracker/{data['id']}",
|
|
}
|
|
]
|
|
+ [
|
|
{
|
|
"type": "ADVISORY",
|
|
"url": f"https://deb.freexian.com/extended-lts/tracker/{cve}",
|
|
}
|
|
for cve in cves
|
|
],
|
|
}
|
|
details = []
|
|
cves = None
|
|
data = m.groupdict()
|
|
m = re.findall(CVE_REGEX, line)
|
|
if len(m) > 0:
|
|
cves = re.findall(CVE_REGEX, line)
|
|
m = re.search(DETAILS_REGEX, line)
|
|
if m:
|
|
details.append(m.groupdict())
|
|
|
|
|
|
def __main__():
|
|
for d in get_osv():
|
|
fn = f"advisories/{d['id']}.json"
|
|
with open(fn, "w") as f:
|
|
print(f"writing to {fn}")
|
|
f.write(json.dumps(d, indent=4, sort_keys=True))
|
|
|
|
|
|
if __name__ == "__main__":
|
|
__main__()
|