Launchpad itself

Cannot lookup bug list from CVE

Bug #322562 reported by Kees Cook
4
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
High
Deryck Hodge
Launchpad itself 3.1.11

Bug Description

I was expecting a bug_collection attached to a CVE object, so I could reproduce the list of bugs for a given CVE.

Related branches

lp://qastaging/~kees/launchpad/lp-322562 (Merged)
lp://qastaging/~deryck/launchpad/lp-322562
Graham Binns (community): Approve
Diff: 90 lines (+20/-2)
4 files modified
lib/lp/bugs/configure.zcml (+0/-1)
lib/lp/bugs/interfaces/bug.py (+1/-0)
lib/lp/bugs/interfaces/cve.py (+6/-0)
lib/lp/bugs/stories/webservice/xx-bug.txt (+13/-1)
Eleanor Berger (intellectronica)
Changed in malone:
importance: Undecided → Medium
milestone: none → 2.2.2
status: New → Triaged
Björn Tillenius (bjornt)
Changed in malone:
milestone: 2.2.2 → none
Revision history for this message
Kees Cook (kees) wrote :

it looks like it's just not exposed? bugs/model/cve.py has a "bugs" SQL join. Is this patch sufficient?

Revision history for this message
Kees Cook (kees) wrote :
Revision history for this message
Deryck Hodge (deryck) wrote :

I'll help kees get his patch updated with tests and in this week to make this cycle.

Changed in malone:
assignee: nobody → Kees Cook (kees)
milestone: none → 3.0
status: Triaged → In Progress
Revision history for this message
Kees Cook (kees) wrote :

Ok, I've attempted to set up some tests (though I've done it blind, since I don't currently have a LP build environment). The branch is linked. Thanks Deryck!

Deryck Hodge (deryck)
Changed in malone:
milestone: 3.0 → 3.1.10
Kees Cook (kees)
Changed in malone:
assignee: Kees Cook (kees) → nobody
Revision history for this message
Deryck Hodge (deryck) wrote :

kees, I'm sorry, but I don't have time to get this one into shape and landed. If you want to have a chat sometime about what needs to happen for the patch to land, ping me.

Changed in malone:
milestone: 3.1.10 → none
status: In Progress → Triaged
Revision history for this message
Kees Cook (kees) wrote :

This missing API is actively blocking the Ubuntu Security Team's goal of being able to sync the CVE tracker to LP. Can it be officially scheduled for a specific milestone?

Kees Cook (kees)
tags: added: platform-blocker
Revision history for this message
Deryck Hodge (deryck) wrote :

Didn't realize this was a blocker. It's been re-prioritized accordingly now.

Changed in malone:
importance: Medium → High
Deryck Hodge (deryck)
Changed in malone:
assignee: nobody → Deryck Hodge (deryck)
milestone: none → 3.1.11
Deryck Hodge (deryck)
Changed in malone:
status: Triaged → In Progress
Revision history for this message
Diogo Matsubara (matsubara) wrote : Bug fixed by a commit

Fixed in devel r9940 <http://bazaar.launchpad.net/~launchpad-pqm/launchpad/devel/revision/9940>

Changed in malone:
status: In Progress → Fix Committed
Diogo Matsubara (matsubara)
Changed in malone:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.