On Mon, May 13, 2019 at 12:52:06PM +0100, Daniel P. Berrangé wrote:
Use the new script logic to regenerate all branch tag info for flaws
A few manual edits are still needed, as the script still doesn't cope
with two situations:
- The vulnerable commit from master was backported to an older
branch. We don't search older branches looking for cherry-picks
yet
- There are multiple vulnerable commits, and they were introduce
across multiple releases. This means some older branches only
contain a subset of the vulnerable commits. We don't check
which vulnerable commits are applicable to branches, instead
assuming all vulnerable commits arrived at the same time.
Signed-off-by: Daniel P. Berrangé <berrange(a)redhat.com>
---
notices/2008/0001.xml | 6 --
[...]
notices/2019/0002.xml | 2 +-
47 files changed, 1224 insertions(+), 189 deletions(-)
Reviewed-by: Ján Tomko <jtomko(a)redhat.com>
Jano