[gentoo-dev] automatic security updates based on GLSA

[gentoo-dev] automatic security updates based on GLSA

[Marius Mauch]

Hi,

I've started to work on a tool to apply security updates to a gentoo
system by checking the GLSA. It uses a XML format of the GLSA and
updates the affected packages to the fixed versions (well, not at the
moment as I've started this only yesterday). Currently the GLSA are only
sent to a mailinglist in plaintext AFAIK and posted on the forums/GWN.

I've put together a DTD for the XML format by looking through a few GLSA
and xml-fied the latest GLSA for nfs-utils. Both documents are available
at http://gentoo.devel-net.org/glsa/ . This is just a draft, any
suggestions for improvements are welcome as are all comments on this
mini-project.

I'll put some code on the site as soon as it is useful, the current
implemention is still in a very early development state and most work
has gone to the backend by now.

Marius

--
gentoo-dev@gentoo.org mailing list