This compares the MITRE CVE list with our webpage security list and produces a diff, so people can investigate, fix, backport and correct differences
Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> --- tools/compare-cvelists.sh | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100755 tools/compare-cvelists.sh diff --git a/tools/compare-cvelists.sh b/tools/compare-cvelists.sh new file mode 100755 index 00000000000..db5a198c310 --- /dev/null +++ b/tools/compare-cvelists.sh @@ -0,0 +1,11 @@ +#!/bin/bash + +wget -q -O cvelist-our-html https://git.ffmpeg.org/gitweb/ffmpeg-web.git/blob_plain/HEAD:/src/security +wget -q -O cvelist-html https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=ffmpeg + +grep '>CVE-[0-2][90][0-9][0-9]-[0-9]*<' cvelist-html | sed 's/.*\(CVE-[0-2][90][0-9][0-9]-[0-9]*\)<.*/\1/g' |sort|uniq > cvelist +tr ', (' "\n" <cvelist-our-html | grep 'CVE-[0-2][90][0-9][0-9]-[0-9]*' | sed 's/.*\(CVE-[0-2][90][0-9][0-9]-[0-9]*\)[^0-9].*/\1/g' | sort | uniq > cvelist-our +diff -u cvelist-our cvelist > cvelist.diff +diffstat cvelist.diff +echo please make sure CVE numbers added to our security page have been or will be backported +echo see cvelist.diff, delete cvelist cvelist.diff cvelist-html cvelist-our cvelist-our-html to cleanup -- 2.48.1 _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".
