[arch-dev-public] Arch-Sheriff - A script to match NetBSD vulnerability database against Arch Linux packages
hugodoria at gmail.com
Thu Sep 11 13:48:57 EDT 2008
Some time ago Paulo Matias  (member of Arch Linux Brazil) started a
very nice project to help improve Arch's security.
Paulo created a python script to automatically test Arch's packages
against the NetBSD vulnerabilities database. The script can run
automatically and generates a text file with the details of all
This project is now called Arch-Sheriff (the source is available here
) and me and Kessia Pinheiro  began to help Paulo in the
development. Arch-Sheriff now generates a html page with all
vulnerabilities details and a link to them. The page can be found
The idea now is to create a way to notify a package maintainer about
the vulnerability and add a way to mark it as fixed in Arch. We also
want to create a login so the maintainers can mark all the
vulnerabilities that they fixed and a rss feed.
Arch-Sheriff is still experimental and there are some things that
needs to be fixed. But i think that you guys can see what we pretend
and where we are going. :)
And, please, tell me what you think about this. Any suggestion is welcome.
Oh! And BTW, can someone update pacman db in gerolde? I think its a
bit old (sheriff got a older version of wireshark and opera, for
More information about the arch-dev-public