Re: Publishing security cross references in the web site

[Martin Schulze <joey@infodrom.org>]

Matt Zimmerman wrote:
> On Thu, Jan 23, 2003 at 04:01:39PM +0100, Gerfried Fuchs wrote:
> 
> >  Just some html things, if you have an empty <td></td> when there is no
> > reference by them do add a &nbsp; in it to make the border not disapear.
> > Also the first row and the first column should rather be <th> instead of
> > <td>.  Finally the IDs should all be linked, but I'm quite sure that you
> > are aware of it.
> 
> This is what I am using to generate links for the references in my database:
> 
>         urlmap = { 'CVE' : 'http://cve.mitre.org/cgi-bin/cvename.cgi?name=%s',
>                    'debbugs' : 'http://bugs.debian.org/%s',
>                    'BUGTRAQID' : 'http://online.securityfocus.com/bid/%s',
>                    'DSA' : 'http://www.debian.org/security/dsa-%s',
>                    'CERT-CA' : 'http://www.cert.org/advisories/CA-%s.html',
>                    'CERT-VU' : 'http://www.kb.cert.org/vuls/id/%s',
>                    'RHSA' : 'http://rhn.redhat.com/errata/RHSA-%s.html' }
> 
> The DSA one is obviously broken, but unfortunately it is more or less
> impossible to generate a correct URL given the DSA number.

You only need to store the last DSA number per year and insert the
proper year.  That's an easy function.

Regards,

	Joey

-- 
MIME - broken solution for a broken design.  -- Ralf Baechle