flatcar / flatcar-build-scripts

A set of helper scripts for building Flatcar Linux. It includes scripts that should be independent of the existing `scripts` repository.
Apache License 2.0
2 stars 5 forks source link

show-fixed-kernel-cves.py: Helper to find fixed Linux CVEs #116

Closed pothos closed 2 years ago

pothos commented 2 years ago

The release notes have a section for fixed CVEs, filling it needs manual work when a changelog wasn't added for it the PR that updated the software component (However, it's also not bad to wait longer with the CVE changelogs because the information gets more acurate). Add a helper for generating the markdown output of fixed Linux kernel CVEs for an update from version A to version B.

How to use/Testing done

./show-fixed-kernel-cves.py -f 5.15.37 -t 5.15.43
[CVE-2022-1734](https://nvd.nist.gov/vuln/detail/CVE-2022-1734), [CVE-2022-28893](https://nvd.nist.gov/vuln/detail/CVE-2022-28893), [CVE-2022-1012](https://nvd.nist.gov/vuln/detail/CVE-2022-1012), [CVE-2022-1729](https://nvd.nist.gov/vuln/detail/CVE-2022-1729)