Commit Graph
4 Commits
Author SHA1 Message Date
weihao dcd03769da feat(vulndb): add Ubuntu OVAL parser and hard delete affected packages
- implement Ubuntu OVAL XML parser to stream AffectedPackage records
- derive package, Ubuntu release and version constraints from OVAL metadata
- wire Ubuntu parser UpsertDB with batched inserts and detailed logging
- switch Alpine/Debian/NVD/Ubuntu affected_packages cleanup to Unscoped hard delete
- align log messages to explicitly state hard deletion behavior
2026-04-10 11:08:09 +08:00
weihao 0eaf2247b8 ubuntu oval fetcher 2026-04-09 16:54:30 +08:00
weihao 87f6cf676f fix(debian): 正确处理 fixed_version 语义并完善报告统计
- debian parser:区分 fixed_version 与 repositories 中 version 的含义,
  对 fixed_version 为 "0"/空时不再从仓库版本回退推断修复版本,改为以
  VersionConstraint="*" 表达“所有版本受影响”,避免生成无意义的 "<*" 约束
- debian parser:增加 codename->版本号映射,统一 OSVersion 表达
- matcher(debian):保留并增强调试日志字段,便于排查版本约束匹配问题
- report:在 BuildVulnReport 中填充 OS 级包数量和漏洞数量,并在 table 输出中复用
- scan:精简匹配结果日志,只输出匹配漏洞数量,避免打印完整 vulns 切片
2026-04-08 19:05:49 +08:00
weihao 196ac369b6 debian vuln fetcher and parser 2026-04-07 14:47:44 +08:00