search

google / osv.dev

Open source vulnerability DB and triage service.
https://osv.dev
Apache License 2.0
1.54k stars 188 forks source link

chore(frontend): improve frontend vuln debuggability #2701

Closed andrewpollock closed 1 month ago

andrewpollock commented 1 month ago

I hit weirdness with an incomplete vulnerability page, which took longer than I'd have liked to get to the bottom of. It was because the source redhat-stage was renamed to redhat AND the particular record I was looking at had failed to import successfully from the newly named redhat source.

This scenario is unexpected enough that it shouldn't be something that happens silently.

andrewpollock commented 1 month ago

Interesting, I also renamed ubuntu to ubuntu-cve and ubuntu-usn, I wonder if the same thing happened.

That will be a little harder to determine, given that rename essentially bifurcated the pool of record IDs.

Once I realized what the problem was, I could then use tools/datafix/list_ids_for_source.py to query for IDs with the old source ID. Anything still existing from that source ID didn't get overwritten by the new import from the new source ID.