canonical/sec-cvescan

Issues

• When using manifest, please provide option to specify suite

  #92 opened 2 years ago by garyvdm
  2

• Publish Pypi packages

  #83 opened 2 years ago by gaby
  0

• grub related packages reported as vulnerable without a means to fix

  #81 opened 3 years ago by mattatsi
  3

• cvescan gives dpkg error on rhel8

  #91 opened 2 years ago by leasharon
  2

• Typo 'datbase'

  #62 opened 4 years ago by setharnold
  3

• Debian compatibility

  #72 opened 4 years ago by jpaulo-oliveira
  2

• KeyError in parsing recent /var/lib/ubuntu-advantage/status.json

  #87 opened 3 years ago by McTrk
  1

• Add support for parsing DISTRIB_CODENAME vs just Ubuntu only

  #88 opened 3 years ago by meramsey
  1

• cvescan on Xenial incorrectly labelling a number of CVEs as still unfixed.

  #86 opened 3 years ago by VexVexVex
  1

• CVE data not yet published for Impish Indiri

  #85 opened 3 years ago by kfiresmith
  2

• CVEscan should catch network issues and not crash

  #82 opened 3 years ago by kfiresmith
  1

• Database files are out of date

  #80 opened 3 years ago by piax93
  2

• CVE-2019-3466 outstanding when postgresql-all = 10+190ubuntu0.1

  #79 opened 3 years ago by stevegnz
  0

• deb package cvescan

  #70 opened 3 years ago by qwerty1q2w
  1

• epoch number might causing inaccurate results

  #78 opened 3 years ago by danielwangksu
  0

• cloud-init package listed as fixable, but not yet available in official repositories

  #76 opened 3 years ago by eugeneotto
  3

• Vulnerability database used by cvescan not the same as the Oval data thus missing some vulnerable packages during scan

  #75 opened 3 years ago by philroche
  0

• Mismatch between oval and cvescan

  #74 opened 4 years ago by davidt99
  0

• Scan shows vulnerable if some patched packages are installed from PPA

  #73 opened 4 years ago by philroche
  1

• Database Release Version

  #71 opened 4 years ago by arossbell
  0

• CVE publish date

  #69 opened 4 years ago by mvk1234
  0

• Different results when using Nagios report format (`-n`)

  #68 opened 4 years ago by niclashoyer
  4

• Incorrect return code

  #67 opened 4 years ago by mkpg2
  1

• Mismatch between using manifest file or not

  #60 opened 4 years ago by D4V3M0NK
  4

• Is dpkg-query -W sufficient for the manifest?

  #61 opened 4 years ago by setharnold
  6

• Fixes Available by `apt-get upgrade` aren't fixable

  #63 opened 4 years ago by D4V3M0NK
  2

• Incorrect debian version comparison in v3.0.0

  #58 opened 4 years ago by mssalvatore
  1

• Migrate ubuntu-vuln-db.json.bz2 off of people.canonical.com

  #59 opened 4 years ago by mssalvatore
  1

• feature request: make cvescan livepatch-aware

  #57 opened 4 years ago by wiswaud
  0

• feature request that cvescan be made to work in ubuntu container images

  #55 opened 4 years ago by tonkapango
  3

• Mismatch between source and binary package version numbers

  #56 opened 4 years ago by mssalvatore
  0

• More data in manifest files

  #53 opened 4 years ago by mssalvatore
  1

• Add option to send output to a syslog server

  #48 opened 4 years ago by mssalvatore
  0

• Provide a progress indicator

  #44 opened 4 years ago by mssalvatore
  0

• Clean up usage

  #49 opened 4 years ago by mssalvatore
  1

• improve handling of manifest files

  #12 opened 4 years ago by markmorlino
  3

• Please provide --version option on CLI

  #36 opened 4 years ago by BillDietrich
  1

• output suggests ua apps but you need to ua enable esm-apps

  #47 opened 4 years ago by mitechie
  7

• CVEScan assumes -security pocket is enabled

  #42 opened 4 years ago by mssalvatore
  0

• Improve pip installability

  #46 opened 4 years ago by mssalvatore
  0

• Clarify archive status

  #43 opened 4 years ago by mssalvatore
  0

• Remove ESM entitlement status lines from output

  #45 opened 4 years ago by mssalvatore
  0

• Binary versions do not match source versions creating false positives

  #35 opened 4 years ago by mssalvatore
  0

• Add Output formatting options

  #32 opened 4 years ago by markmorlino
  0

• cvescan v2 downloads uct.json.bz2 into $PWD and does not clean it up

  #40 opened 4 years ago by stevebeattie
  0

• Installs on focal but does not run on focal

  #37 opened 4 years ago by BillDietrich
  6

• python version verbiage

  #34 opened 4 years ago by markmorlino
  1

• CVEScan consumes a lot of CPU resources

  #31 opened 4 years ago by markmorlino
  0

• Output patch availability status in addition to CVEs

  #30 opened 4 years ago by markmorlino
  1

• Include OVAL files by default for offline use

  #22 opened 4 years ago by joemcmanus
  7