From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id D52A14C78A for ; Sun, 23 Feb 2025 13:08:36 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id E1E1C68C876; Sun, 23 Feb 2025 15:08:30 +0200 (EET) Received: from relay1-d.mail.gandi.net (relay1-d.mail.gandi.net [217.70.183.193]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id D053168C566 for ; Sun, 23 Feb 2025 15:08:23 +0200 (EET) Received: by mail.gandi.net (Postfix) with ESMTPSA id F06A741D11 for ; Sun, 23 Feb 2025 13:08:22 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=niedermayer.cc; s=gm1; t=1740316103; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=ds9lTiimRv8K2W4SdXajGR21l8Ffmk9ssnB39ywgMQg=; b=QlLRzNB6Kg9FaLdhso6ZPLHdF1H8lwJmra68lmZ/nDm8iRCeqhhaDClnelO8qNhAMt7oaF XqMyaf8ZOPMx/mqXF4Xfqxs2JK+r/4/is1RgKv97KKvhFriwcFtVe2nD5ZAZlp0i+xlDZJ Y6cIP1G7+V+s1/HsWWza8thhL/GPWo/U2B9p7JxkREDPypblLRqUH5f/vTta7o/18Ww6tc z0vtlMLLIjI+bWFzv6Jti5sOZJ7KoyRr8v++EXMuytUwmuP9fOp9DdHR91Ykuaq+vUGFYi hJhHtBwcHJlPUG58pL5N3uug92MbufKdOVO34rlLCL4PFbv1cZBdFF94XSlaMQ== From: Michael Niedermayer To: FFmpeg development discussions and patches Date: Sun, 23 Feb 2025 14:08:22 +0100 Message-ID: <20250223130822.1677157-1-michael@niedermayer.cc> X-Mailer: git-send-email 2.48.1 MIME-Version: 1.0 X-GND-State: clean X-GND-Score: -85 X-GND-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdejheeludcutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfitefpfffkpdcuggftfghnshhusghstghrihgsvgenuceurghilhhouhhtmecufedtudenucesvcftvggtihhpihgvnhhtshculddquddttddmnegfrhhlucfvnfffucdludehmdenucfjughrpefhvffufffkofgggfestdekredtredttdenucfhrhhomhepofhitghhrggvlhcupfhivgguvghrmhgrhigvrhcuoehmihgthhgrvghlsehnihgvuggvrhhmrgihvghrrdgttgeqnecuggftrfgrthhtvghrnhepgeeigfdthfeigfetuddtvdejffevfedujeevvdduheetudfgffehkedvveegheehnecuffhomhgrihhnpehffhhmphgvghdrohhrghdpmhhithhrvgdrohhrghenucfkphepgedurdeiiedrieejrdduudefnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepgedurdeiiedrieejrdduudefpdhhvghloheplhhotggrlhhhohhsthdpmhgrihhlfhhrohhmpehmihgthhgrvghlsehnihgvuggvrhhmrgihvghrrdgttgdpnhgspghrtghpthhtohepuddprhgtphhtthhopehffhhmphgvghdquggvvhgvlhesfhhfmhhpvghgrdhorhhg X-GND-Sasl: michael@niedermayer.cc Subject: [FFmpeg-devel] [PATCH] add tools/compare-cvelists.sh X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: This compares the MITRE CVE list with our webpage security list and produces a diff, so people can investigate, fix, backport and correct differences Signed-off-by: Michael Niedermayer --- tools/compare-cvelists.sh | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100755 tools/compare-cvelists.sh diff --git a/tools/compare-cvelists.sh b/tools/compare-cvelists.sh new file mode 100755 index 00000000000..db5a198c310 --- /dev/null +++ b/tools/compare-cvelists.sh @@ -0,0 +1,11 @@ +#!/bin/bash + +wget -q -O cvelist-our-html https://git.ffmpeg.org/gitweb/ffmpeg-web.git/blob_plain/HEAD:/src/security +wget -q -O cvelist-html https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=ffmpeg + +grep '>CVE-[0-2][90][0-9][0-9]-[0-9]*<' cvelist-html | sed 's/.*\(CVE-[0-2][90][0-9][0-9]-[0-9]*\)<.*/\1/g' |sort|uniq > cvelist +tr ', (' "\n" cvelist-our +diff -u cvelist-our cvelist > cvelist.diff +diffstat cvelist.diff +echo please make sure CVE numbers added to our security page have been or will be backported +echo see cvelist.diff, delete cvelist cvelist.diff cvelist-html cvelist-our cvelist-our-html to cleanup -- 2.48.1 _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".