Merge pull request #285 from sbs2001/165-debian-ignore-temp-vulns

Stop debian importer from collecting temp vulnerabilities

Author: sbs2001

vulnerabilities/importers/debian.py

@@ -108,6 +108,12 @@ def _parse(self, pkg_name: str, records: Mapping[str, Any]) -> List[Advisory]:
 
         for cve_id, record in records.items():
             impacted_purls, resolved_purls = set(), set()
+            if not cve_id.startswith("CVE"):
+                continue
+
+            # vulnerabilities starting with something may not be public yet
+            # see for instance https://web.archive.org/web/20201215213725/https://security-tracker.debian.org/tracker/TEMP-0000000-A2EB44  # nopep8
+            # TODO: this would need to be revisited though to ensure we are not missing out on anything  # nopep8
 
             for release_name, release_record in record["releases"].items():
                 if not release_record.get("repositories", {}).get(release_name):

vulnerabilities/tests/test_data/debian.json

@@ -72,6 +72,29 @@
           "urgency": "medium"
         }
       }
+    },
+    "TEMP-0000000-A2EB44": {
+      "scope": "remote",
+      "debianbug": 456,
+      "description": "Multiple temp vulnerabilities in foo bar",
+      "releases": {
+        "stretch": {
+          "status": "resolved",
+          "repositories": {
+            "stretch": "1.2.3"
+          },
+          "fixed_version": "1.3.3",
+          "urgency": "medium"
+        },
+        "buster": {
+          "status": "resolved",
+          "repositories": {
+            "buster": "1.3.4"
+          },
+          "fixed_version": "1.4.5",
+          "urgency": "medium"
+        }
+      }
     }
   }
 }

vulnerabilities/tests/test_debian.py

@@ -77,6 +77,7 @@ def test_import(self):
         self.assert_for_package("mimetex", "1.74-1", "stretch")
         self.assert_for_package("mimetex", "1.50-1.1", "buster")
         self.assert_for_package("mimetex", "1.76-1", "buster")
+        assert models.Vulnerability.objects.filter(cve_id__startswith="TEMP").count() == 0
 
     def test_response_is_new(self):