Skip to content
This repository has been archived by the owner on Dec 1, 2024. It is now read-only.

Releases: facebookincubator/nvdtools

Catch up with the fixes.

11 Apr 16:48
Compare
Choose a tag to compare
Fix linter.

What's done:
  * change linter from deprecated golint to revive
  * exclude SA5011 (deprecated strings.Title() call) -- the string
    passed to it is guaranteed to be ASCII
  * move nil-pointer check before first pointer dereferece in
    cvefeed/cvecache.go
  * proper declare-initialze syntax in
    providers/redhat/package_feed_test.go:feedSummary()
  * replace if strings.HasSuffix(..) { // manually trim suffix } with
    strings.TrimSuffix() in rpm/parse.go

v0.1.4: Optimizations and fixes

08 Aug 18:25
Compare
Choose a tag to compare

Almost a year worth of diffs. Mostly includes fixes and optimizations, but here are some of added features:

  • bzip2 support for cpe2cve
  • fetch a single Redhat CVE
  • static checking with golangci-lint

v0.1.3: Update build and release systems

28 Apr 11:08
Compare
Choose a tag to compare
This diff removes the build_tarballs.sh and the rpm/Makefile files and
moves their logic into the main Makefile.

The build system places binary files in the build directory. The release
system copy those files over to the release directory, preparing it for
travis to pick up.

Examples:

make binary_deb binary_rpm VERSION=1.0
make clean binary_tar VERSION=1.0 GOOS=linux GOARCH=amd64
make distclean release VERSION=1.0

Deleted the debian/copyright file because it was outdated; I think this
could be automated with debmake but didn't spend time on it.

There's other minor changes like removing trailing space from files,
updating and adding documentation.

Re-add copyright notice to vulndb/schema.go.

v0.1.2: Fix two bugs:

24 Jan 17:09
Compare
Choose a tag to compare
 - nvdjson.smartVerCmp was comparing the full version strings instead of
   major, minor, path etc. substrings;
 - off-by-one error in AttributeColumnMap.CPE()

v0.1.1: Fixing versioning of releases to get rid of `v` in files (#20)

24 Jan 13:07
Compare
Choose a tag to compare
* Fixing versioning of releases to get rid of `v` in files

Current releases had `v` in all the files which is against a current standard.
Therefore, we should remove this.

* Changing tarball non-standard binary names

Solving issue #19 to make tarballs contain standard binary names and removing the redundant /binaries directory

Test:
build the tarbals with `./build_tarballs.sh`
and checked the tarball contents:
```
vagrant@ubuntu-xenial:~/repos/nvdtools/release$ tar zvft nvdtools-4.4.4-linux-amd64.tar.gz
-rwxrwxr-x vagrant/vagrant 3513959 2019-01-24 00:36 cpe2cve
-rwxrwxr-x vagrant/vagrant 2233700 2019-01-24 00:36 csv2cpe
-rwxrwxr-x vagrant/vagrant 8595732 2019-01-24 00:36 nvdsync
-rwxrwxr-x vagrant/vagrant 2229430 2019-01-24 00:36 rpm2cpe
```

v0.1.0

23 Jan 19:03
Compare
Choose a tag to compare
update github oauth token