Fix alpine importer wrong assumptions

appcanary / coalmine

GNU Lesser General Public License v3.0

0 stars 0 forks source link

Closed j0ni closed 7 years ago

j0ni commented 7 years ago

Importer assumed references would always be supplied in the form of a list. Sometimes they are just a string.
Importer assumed each reference would be a single CVE. Sometimes they are multiple references, including CVE, XSA, ZBX prefixed references.
Sometimes there are plain text annotations. These should be ignored.

mveytsman commented 7 years ago

Sorry to be anal about this -- do you mind adding a test for "CVE-2017-2616 (+ regression fix)" and "CVE-2017-8073.patch "

I just want to make sure we don't drop CVEs on accident since that's where we will pull criticalities

mveytsman commented 7 years ago

Since @j0ni is onto greener pastures, I wrote the test all by my lonesome 😢