Page MenuHomeFreeBSD

security/vuxml: Add CWE information
Needs ReviewPublic

Authored by trasz on Dec 9 2024, 7:17 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Jan 10, 2:28 AM
Unknown Object (File)
Mon, Dec 23, 7:11 AM
Unknown Object (File)
Mon, Dec 23, 6:58 AM
Unknown Object (File)
Mon, Dec 23, 6:57 AM
Unknown Object (File)
Dec 17 2024, 4:27 PM

Details

Reviewers
philip
brooks
Group Reviewers
security
Summary

This updates "make newentry" to also include CWE information.
Requires VuXML 1.2.

Diff Detail

Repository
R11 FreeBSD ports repository
Lint
No Lint Coverage
Unit
No Test Coverage
Build Status
Buildable 61053
Build 57937: arc lint + arc unit

Event Timeline

trasz requested review of this revision.Dec 9 2024, 7:17 PM
trasz created this revision.

Note that for now this requires new schema files, to be found at:

https://people.freebsd.org/~trasz/vuxml-12.dtd
https://people.freebsd.org/~trasz/vuxml-model-12.mod

Otherwise "make validate" will fail.

This looks good to me, but please wait for the security team to discuss this before committing. I have no idea what (if any) downstream consumers we have and how this will affect them. We have not touched this schema since 2005.

This looks good to me from vuxml side.

But it might be interesting to take a look at the pkg_audit.c including cwe into structure and parse entry.