07:44 Fernando Apesteguía (fernape) 

security/vuxml: Fix description body

Keep the original description body for "make newentry" without parameters.

    27b1250

10:58 Fernando Apesteguía (fernape) 

security/vuxml: Fix make newentry CVE_ID

Fix description body, broken when introducing SA_ID

Fixes:	e90a0b117fdc61d6d6bc4b02a4b7b5be5a878b2d

    07217e5

11:25 Fernando Apesteguía (fernape) 

security/vuxml: Add SA_ID to make newentry

Automate registration of FreeBSD Security Advisories.

It adds a new parameter for the newentry subcommand accepting a SA ID as present
in the FreeBSD Security Advisories web page
(https://www.freebsd.org/security/advisories/)

Fills an entry following the common structure for FreeBSD SAs and leaves some
"FIXME" strings in those places that need special care.
Developers should NOT blindly trust the output of the script.

`make newentry SA_ID=FreeBSD-SA-23:11.wifi.asc`
`make newentry SA_ID=FreeBSD-SA-22:01.vt`

Reviewed by:		philip@
Differential Revision: https://reviews.freebsd.org/D41966

    e90a0b1

18:31 Fernando Apesteguía (fernape) 

security/vuxml: Autofill CVE information

The `newentry` target accepts an optional parameter CVE_ID.
When provided, the newentry.sh script tries to retrieve information from the
NVD and MITRE databases and fill the template accordingly.

The script needs `textproc/jq` and warns the user and exists if it is not found.

How to use it:

make newentry CVE_ID=CVE-2022-39282

Note that this is just a helper. *YOU HUMAN* have to check that the information
is correct.

Reviewed by: tcberner, jlduran_gmail.com, mat
Differential Revision: https://reviews.freebsd.org/D38894

    7744049

15:11 Mateusz Piotrowski (0mp) 

security/vuxml: Add example cvename tag to template

Reviewed by:	riggs
Approved by:	riggs (ports secteam)
Differential Revision:  https://reviews.freebsd.org/D30231

    1e3fa62

06:56 remko (src,doc committer) 

Make it more clear that "SAME URL" is actually the blockquote
url.

hat:	secteam

 

02:12 eadler 

Minor tweak to standard template in order to fit with convention

 

15:34 nectar 

$EDITOR should not be quoted.  It might be "emacsclient -a vi" or
something.

17:13 nectar 

Change the behavior of `make newentry' so that it invokes ${EDITOR}
after adding the template, since this is certainly the next required
action. [1]

Fix the error checking: a pipeline was masking some errors, and `set
errexit' was not effective in some other places.

Suggested by:   delphij [1]

15:43 nectar 

Add a target, `newentry', that will insert a VuXML <vuln> template
(including generated VID) to the top of the `vuln.xml' file.  This will
save a little time when adding new entries.

Inspired by:    a patch from simon