Commit Graph

12 Commits

Author SHA1 Message Date
b575eb1010 Order versions in descending order in CVE list
Across other parts of pgweb we display things from newest to
oldest version, so this brings the CVE display to match this
convention.
2021-03-28 13:18:09 -04:00
cd616da557 Add page with additional details about a CVE
This page contains most information that may be found on 3rd party
sites about a particular CVE, but with the benefit of being hosted
on the PostgreSQL infrastructure.

This does require inserting the CVE description into the website,
which will include backporting the CVE descriptions throughout
many existing CVEs, but the added benefit is that this information
is available when we publish a release, vs. waiting for a 3rd party
to publish the info.

This patch also adds sitemap indexing for each of the CVE entries,
and ensures the top-level CVE URL is in the sitemap.
2021-03-28 12:22:24 -04:00
7547b6f766 Update syntax for relative imports 2019-01-26 16:19:26 +01:00
0883ac6423 Fix whitespace and indentation, per pep8 2019-01-17 20:47:43 +01:00
87237f6536 Tabs, meet your new overlords: spaces
In a quest to reach pep8, use spaces to indent rather than tabs.
2019-01-17 15:35:39 +01:00
fd37389a3b Replace NavContext and render_to_response with render_pgweb
render_to_response does not work on newer django, so it needs to be
replaced. And using a speicfic context actually overcomplicates things,
it's easier to just use a wrapper function. For those cases where we
don't need NavContext, just use render() (the new shortcut function from
django), which also removes the need to use RequestContext.
2018-03-10 10:38:11 -05:00
52230d3731 Fix ordering of CVE entries 2018-02-08 15:27:25 +01:00
283d1f710c Don't list unsupported versions that have no patches at all
That just generates a completely empty page in the output, so remove the
link completely instead.

For supported versions we list all of them, including if they have no
patches.
2018-01-26 11:28:53 +01:00
9dcecdff67 Remove dead code 2018-01-26 11:18:39 +01:00
89f7171bfd Fix query for version-specific security support list
When asking for version x, we should still list all versions the patch
in question applies to, not limit it to the current one.
2018-01-26 11:18:02 +01:00
e896caf1d4 Small refectoring
Makes the code easier to use in future feed support
2018-01-26 11:12:04 +01:00
0cb56d9355 Database:ify the list of security patches
This finally moves the patches into the db, which makes it a lot easier
to filter patches in the views.

It also adds the new way of categorising patches, which is assigning
them a CVSSv3 score.

For now, there are no public views to this, and the old static pages
remain. This is so we can backfill all existing security patches before
we make it public.
2018-01-25 21:59:13 +01:00