release/build_cve_list.sh

#!/bin/sh -e

# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of
# the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations under
# the License.

cd `dirname $0`

basename=`basename $0`

ssh people.apache.org "sh -e" <<EOF

tmp_dir=\`mktemp -d /tmp/$basename.XXXXXX\` || exit 1

mbox_export_file=\$tmp_dir/mbox

cve_list_file=\$tmp_dir/cve_list.txt

log () {
    printf "\033[1;31m\$1\033[0m\n"
}

log "Adding mails to export..."

find /home/apmail/public-arch/couchdb.apache.org/dev -type f | \
    while read mbox_file; do
    compressed=\`echo \$mbox_file | grep -E "\.gz" || true\`
    if test -n "\$compressed"; then
        echo "Adding" \$mbox_file "(compressed)"
        cat \$mbox_file >> \$mbox_export_file
     else
        echo "Adding" \$mbox_file
        cat \$mbox_file | gzip >> \$mbox_export_file
    fi
done

log "Finding CVE numbers..."

zgrep "CVE" \$mbox_export_file | \
    grep "Apache CouchDB" | \
    sed "s,.*CVE,CVE," | \
    cut -c1-13 | \
    grep -E "CVE-[0-9]{4}-[0-9]{4}" | \
    grep -v "CVE-2008-2370" | \
    sort | \
    uniq | \
    tee \$cve_list_file

rm \$mbox_export_file

log "Writing CVE numbers..."

echo \$cve_list_file
EOF