Gentoo Archives: gentoo-dev

From: Jaco Kroon <jaco@××××××.za>
To: gentoo-dev@l.g.o, Matthew Smith <matthew@g.o>
Subject: Re: [gentoo-dev] [RFC] A new GLSA schema
Date: Thu, 10 Nov 2022 09:48:33
Message-Id: 9b8b7fc0-d428-0cd8-850f-4ac607fd0e2b@uls.co.za
In Reply to: Re: [gentoo-dev] [RFC] A new GLSA schema by Matthew Smith
1 Hi,
2
3 On 2022/11/10 11:40, Matthew Smith wrote:
4
5 > Hi,
6 >
7 > On 10/11/2022 08:43, Jaco Kroon wrote:
8 >> A mechanism to QUERY which installed packages are affected by known
9 >> GLSA's would also be tremendously helpful.
10 >
11 > You can use glsa-check for this, which comes with portage:
12 > https://wiki.gentoo.org/wiki/Portage#glsa-check
13
14 Very useful for human-readable, not so much for integration into other
15 systems :).
16
17 We currently parse a lot of that using things like awk etc ... but
18 thinking about it now, one could probably dig into the xml stuff
19 directly, so use glsa-check -l to get the list, then find the xml files
20 and query those using tools more suited for that.
21
22 Thank you :).
23
24 Kind Regards,
25 Jaco