Fedora Extras Security Response Team

Jason L Tibbitts III tibbs at math.uh.edu
Fri Apr 28 21:10:35 UTC 2006


>>>>> "JB" == Josh Bressers <bressers at redhat.com> writes:

JB> We will need a package manifest.  Basically a file that tells us
JB> which packages and versions we're currently shipping in extras.

Here's the query script I use:

#!/usr/bin/perl -w

$OWNERS='/home/tibbs/work/extras-cvs/owners/owners.list';
$MIRROR='/nas/redhat/mirror-extras';
@RELEASES=qw(3 4 5 development);

$qa=''; #quiet warning

open OWNERS, $OWNERS or die "Can't open $OWNERS: $!";
while (defined($l = <OWNERS>)) {
  next if $l =~ /^#/;
  chomp $l;

  ($distro, $package, $desc, $owner, $qa, $cc) = split(/\|/, $l);

  last if $package eq $ARGV[0];
}

unless ($package) {
  print "Could not find package $ARGV[0] in $OWNERS\n";
  exit 1;
}

print "Found package $package in owners.list:\n";
print "  Distro:\t$distro\n";
print "  Desc:\t\t$desc\n";
print "  Owner:\t$owner\n";
print "  CC:\t\t$cc\n";
print "  Releases and versions:\n";

for $release (@RELEASES) {
  $dir = "$MIRROR/$release/SRPMS";
  $release eq "development" && ($release = "dev");

  opendir DIR, $dir or die "Can't opendir $dir: $!";
  while (defined($f = readdir(DIR))) {
    next unless $f =~ /^$package-(.*)\.src\.rpm$/;
    next if $1 =~ /-.*-/;

    ($ver, $rev) = $1 =~ /^([^-]+)-([^-]+)$/;
   
    print "    $release\t$ver\t$rev\t$dir/$f\n";
  }
}

> releases xmms
Found package xmms in owners.list:
  Distro:       Fedora Extras
  Desc:         The X MultiMedia System, a media player which resembles Winamp
  Owner:        ville.skytta at iki.fi
  CC:
  Releases and versions:
    4   1.2.10  19.fc4  /nas/redhat/mirror-extras/4/SRPMS/xmms-1.2.10-19.fc4.src.rpm
    4   1.2.10  21.fc4  /nas/redhat/mirror-extras/4/SRPMS/xmms-1.2.10-21.fc4.src.rpm
    5   1.2.10  22.fc5  /nas/redhat/mirror-extras/5/SRPMS/xmms-1.2.10-22.fc5.src.rpm
    5   1.2.10  23.fc5  /nas/redhat/mirror-extras/5/SRPMS/xmms-1.2.10-23.fc5.src.rpm
    dev 1.2.10  23.fc6  /nas/redhat/mirror-extras/development/SRPMS/xmms-1.2.10-23.fc6.src.rpm

 - J<




More information about the Fedora-security-list mailing list