Ubuntu CVE Tracker

#!/bin/bash -e # Author: Jamie Strandboge # Author: Kees Cook # Author: Marc Deslauriers # Author: Steve Beattie # Copyright (C) 2005-2018 Canonical Ltd. # # This script is distributed under the terms and conditions of the GNU General # Public License, Version 2 or later. See http://www.gnu.org/copyleft/gpl.html # for details. # # USAGE: # scripts/html-report -d ~/public_html/cve # scripts/html-report -d ~/public_html/cve -S # # '-d' specifies the output directory for the html # if [ "$1" = "-h" ]; then cat << EOM html-report -d [-S] -S show only official releases -d output directory -D support database -E include embargoed EOM exit 0 fi embargoed="EMBARGOED" support_db= outdir= table_args= suffix= pythonver= ubuntu_table_exe="./scripts/ubuntu-table" if [ -n "$UCT_REVIEWED" ]; then ubuntu_table_exe="$UCT_REVIEWED/scripts/ubuntu-table" fi while getopts "hSEd:D:T:u:" opt do case "$opt" in d) outdir="$OPTARG";; D) support_db="$OPTARG";; S) table_args="$table_args -S" suffix="-released" ;; T) table_args="$table_args $OPTARG";; u) ubuntu_table_exe="$OPTARG";; E) embargoed="THISISNOTTHEEMBARGOEDYOUARELOOKINGFOR";; h) help ; exit 0;; ?) help;; esac done shift $(($OPTIND - 1)) # setup the output directory mkdir "$outdir" 2>/dev/null || true if [ ! -d "$outdir" ]; then echo "ERROR: '$outdir' does not exist" exit 1 fi if [ -n "$UCT_REVIEWED" ] && [ -z "$UCT" ]; then echo "ERROR: must set UCT when using UCT_REVIEWED" exit 1 fi # setup the temp directory tmpdir=`mktemp -d` trap "rm -rf ${tmpdir}" EXIT header() { outfile="$1" show="$2" main_active="" universe_active="" partner_active="" if [ "$show" = "main" ]; then main_active="active "; elif [ "$show" = "universe" ]; then universe_active="active "; elif [ "$show" = "partner" ]; then partner_active="active "; fi cat > "$outfile" < Ubuntu CVE Tracker

Ubuntu ${show^} CVEs

EOM } introduction() { outfile="$1" suffix="$2" cat >> "$outfile" <Introduction

Ubuntu tracks its security vulnerabilities via the Ubuntu CVE Tracker. This report is divided into the following sections:

Main (supported by Canonical Ltd)
Universe (supported by the Ubuntu community)
Partner (supported by upstream vendor)

See Priority Color Key for information about the significance of the colors on this page.

Filters

EOM } footer() { outfile="$1" NOW=$(date -u +"%Y-%m-%d %R %Z") COMMIT=$(git rev-parse HEAD) cat >> "$outfile" <Updated: ${NOW} (commit ${COMMIT})

EOM } OUTPUT=$($ubuntu_table_exe --html --supported --no-retired $table_args) #for show in main universe partner index for show in main universe partner do outfile="${tmpdir}/${show}${suffix}.html" header "$outfile" "$show" introduction "$outfile" "$suffix" if [ "$show" = "main" ]; then echo "

Main

" >> "$outfile" # all this sed work strips out the last column echo "$OUTPUT" | egrep '(|

||||||SUPPORTED)' | egrep -v "$embargoed" | sed -r 's#[[:space:]]+(

[[:space:]]*[a-zA-Z0-9\-]*[[:space:]]*

[[:space:]]+)+[[:space:]]+$##' | sed -r 's#Notes$##' >> "$outfile" echo "

* supported by Canonical Ltd

" >> "$outfile" elif [ "$show" = "universe" ]; then echo "

Universe

" >> "$outfile" echo "$OUTPUT" | egrep '(|

||||||UNIVERSE)' | egrep -v 'PARTNER' | egrep -v "$embargoed" | sed -r 's#[[:space:]]+(

[[:space:]]*[a-zA-Z0-9\-]*[[:space:]]*

[[:space:]]+)+[[:space:]]+$##' | sed -r 's#Notes$##' >> "$outfile" echo "

* supported by Canonical Ltd

" >> "$outfile" elif [ "$show" = "partner" ]; then echo "

Partner

" >> "$outfile" echo "$OUTPUT" | egrep '(|

||||||PARTNER)' | egrep -v "$embargoed"| sed -r 's#[[:space:]]+(

[[:space:]]*[a-zA-Z0-9\-]*[[:space:]]*

[[:space:]]+)+[[:space:]]+$##' | sed -r 's#Notes$##' >> "$outfile" fi footer "$outfile" done err= if [ -n "$support_db" ]; then if [ ! -f "$support_db" ]; then echo "Skipping flavors generation" err="yes" fi flavout="${tmpdir}/flavors.html" header "$flavout" echo "

Priority Color Key

CVEs affecting $f only

[[:space:]]+

[[:space:]]*[a-zA-Z0-9\-]*[[:space:]]*

[[:space:]]+[[:space:]]+$##' | sed -r 's#Notes$##' >> "$outfile" footer "$outfile" outfile="${tmpdir}/${f}${suffix}-all.html" header "$outfile" echo '

Priority Color Key

' >> "$outfile" echo "

All CVEs affecting $f

" >> "$outfile" OUTPUT=$($ubuntu_table_exe --html --supported --no-retired $table_args --flavor="$f" --support-db="$support_db") echo "$OUTPUT" | egrep '(|

||[[:space:]]+

[[:space:]]*[a-zA-Z0-9\-]*[[:space:]]*

[[:space:]]+[[:space:]]+$##' | sed -r 's#Notes$##' >> "$outfile" footer "$outfile" echo "

Open CVEs in $f (all CVEs affecting $f)

" >> "$flavout" done echo "

" >> "$flavout" footer "$flavout" fi mv -f ${tmpdir}/* ${outdir} if [ "$err" = "yes" ]; then exit 1 fi