External check

2018-06-17 Thread Security Tracker
CVE-2018-10856: RESERVED
--
The output might be a bit terse, but the above ids are known elsewhere,
check the references in the tracker. The second part indicates the status
of that id in the tracker at the moment the script was run.



Re: Dealing with renamed source packages during CVE triaging

2018-06-17 Thread Brian May
Salvatore Bonaccorso  writes:

>> Feel free to make a pull request, I don't think we have a specific 
>> dependency 
>> on Python 2 modules anywhere. But it might take a bit to get 
>> reviewed/deployed
>> as it's not a high priority issue.
>
> To be kept in mind: whatever change is proposed for the code part of
> the security tracker needs potentially to be able to run on the
> security-tracker host soriano (running on stretch), preferably without
> introducing new dependencies if they are not needed. Merge/pull requests
> for those parts are preferred.

I will look at making a pull request tomorrow. The changes should be
reasonably straight forward syntax changes (e.g. use "!=" instead of
"<>" for the does not equal operator), work with Python3 in stretch, and
not require any additional dependancies (I think it only depends on
Python3).

Perhaps the most intrusive change is deleting the py file with the
definition of namedtuple, it is not needed now Python has the
collections module with a built in namedtuple.
-- 
Brian May