[arch-general] arch-audit: pkg-audit-like tool for Arch Linux
Hi everybody, I'm happy to announce my tiny project named arch-audit[1]. It parses the CVE wiki page[2] and reports which packages on your system are affected by a vulnerability and if a fixed version for that package is already available. Something like pkg-audit on FreeBSD, but not so powerful (yet!!!). I just made it and released, so it's more than alpha and your feedbacks are needed! I hope you find it useful. Cheers [1] https://github.com/ilpianista/arch-audit [2] https://wiki.archlinux.org/index.php/CVE -- Andrea Scarpino (former) Arch Linux Developer
Thank you, I've got a stupid question. Is there the need to first update the package database, before arch-audit could check if there are upgrades available? I suspect it already gets this information when it parses the CVE wiki page, so there is no need to update the package database, right? Regards, Ralf [rocketmouse@archlinux ~]$ pacman -Q $(arch-audit -q | sort -u) bzip2 1.0.6-5 cinnamon-screensaver 3.0.1-1 gdk-pixbuf2 2.34.0-2 jasper 1.900.1-15 lib32-gdk-pixbuf2 2.34.0-1 libimobiledevice 1.2.0-3 libtiff 4.0.6-2 libusbmuxd 1.0.10-1 libwmf 0.2.8.4-13 wpa_supplicant 1:2.5-3 [rocketmouse@archlinux ~]$ arch-audit -q -u [rocketmouse@archlinux ~]$ sudo pacman -Syu && arch-audit -q -u [snip] there is nothing to do
On 09/24/2016 11:59 AM, Andrea Scarpino wrote:
Hi everybody,
I'm happy to announce my tiny project named arch-audit[1].
It parses the CVE wiki page[2] and reports which packages on your system are affected by a vulnerability and if a fixed version for that package is already available. Something like pkg-audit on FreeBSD, but not so powerful (yet!!!).
I just made it and released, so it's more than alpha and your feedbacks are needed!
I hope you find it useful.
Thanks a bunch for this, it's great! :) Gives me some small-scale rust code to read for learning that, too, so that's nice as well ;) Cheers, Bennett -- GPG fingerprint: 871F 1047 7DB3 DDED 5FC4 47B2 26C7 E577 EF96 7808
participants (3)
-
Andrea Scarpino
-
Bennett Piater
-
Ralf Mardorf