This script and (optional, poorly thought out) web interface will check Red Hat's CVE database to retrieve information on what version the issue was fixed via a backport patch. Think SCAP, except much less useful.
To use, pipe in a whitespace separated list of CVE references in one of the following forms (for example):
python rhsa.py < cvelist.txt
echo "CVE-2001-1002 CVE-2004-4002" | python rhsa.py
Alternatively launch the web interface with python web.py.
Requires:
- Python >= 2.6 (tested with Python 2.6, CentOS 6)
- BeautifulSoup
- SNMP Python libraries (net-snmp-python on CentOS/RHEL)
Additionally, for the optional web interface:
- Mako
- Scrubber
- CherryPy
(Not in order)
- Upgrade to BeautifulSoup4
- Threading!
- Save a report for later retrieval (the trendy part of me wants to use NoSQL for this...)
- Better looking web interface
- Unit tests