Page MenuHomeFreeBSD

security/vuxml: Add CWE information
Needs ReviewPublic

Authored by trasz on Dec 9 2024, 7:17 PM.
Tags
None
Referenced Files
F158434281: D48003.diff
Mon, Jun 1, 1:47 PM
Unknown Object (File)
Sun, May 24, 6:36 PM
Unknown Object (File)
Apr 28 2026, 12:41 PM
Unknown Object (File)
Apr 28 2026, 6:46 AM
Unknown Object (File)
Apr 27 2026, 2:33 PM
Unknown Object (File)
Apr 27 2026, 1:44 PM
Unknown Object (File)
Apr 14 2026, 1:23 PM
Unknown Object (File)
Apr 10 2026, 5:38 PM

Details

Reviewers
philip
brooks
Group Reviewers
security
Summary

This updates "make newentry" to also include CWE information.
Requires VuXML 1.2.

Diff Detail

Repository
R11 FreeBSD ports repository
Lint
No Lint Coverage
Unit
No Test Coverage
Build Status
Buildable 61053
Build 57937: arc lint + arc unit

Event Timeline

trasz requested review of this revision.Dec 9 2024, 7:17 PM
trasz created this revision.

Note that for now this requires new schema files, to be found at:

https://people.freebsd.org/~trasz/vuxml-12.dtd
https://people.freebsd.org/~trasz/vuxml-model-12.mod

Otherwise "make validate" will fail.

This looks good to me, but please wait for the security team to discuss this before committing. I have no idea what (if any) downstream consumers we have and how this will affect them. We have not touched this schema since 2005.

This looks good to me from vuxml side.

But it might be interesting to take a look at the pkg_audit.c including cwe into structure and parse entry.