4 ms·
At Appcanary, we're thinking about opening up our vulnerability database to be browsable and searchable by the public. If you're not sure which version has the
by ontoillogical 10y ago
At Appcanary, we're thinking about opening up our vulnerability database to be browsable and searchable by the public. If you're not sure which version has the patch for this vulnerability in your distro, here's what we know:
Ubuntu - https://appcanary.com/vulns/45984 https://appcanary.com/vulns/45984
Debian - https://appcanary.com/vulns/45983 https://appcanary.com/vulns/45983
Amazon Linux - https://appcanary.com/vulns/45992 https://appcanary.com/vulns/45992
Centos - no patch yet
If you found this useful, please let me know!
- JonRB 10y agoThat sounds like an awesome idea - and a good way of promoting yourselves! I'll admit I spent a bit of time on your homepage thinking "the use of those birds are a bit twitter". Then I realised you're called App Canary.
- orblivion 10y agoIt's sad that security information and news is so confusing as it is, but thank you for trying to improve it. I'll try to remember your site.
- stass 10y agoSome operating systems like FreeBSD and (I think) Debian have this functionality built in without the need for external service. So it depends on what you are using. RedHat had a similar functionality as well AFAIR.
- cyphar 10y agoSUSE-based distros have it as well (zypper tells you about CVE patches and how severe they are).
- rkv 10y agoPlease do! Great work.
- ndesaulniers 10y agoDo you keep track of Android releases? edit: https://appcanary.com/vulns https://appcanary.com/vulns made my browser crawl. Please fix that page.
- microcolonel 10y agoI think you just need more RAM, it's convenient having it all on one page instead of paginated.
- ndesaulniers 10y agoDo you know any good sites where I could download some more? ;)
- deleted 10y ago[deleted]
- Natanael_L 10y agoI think there's some FPGA code somewhere to emulate external RAM...
- ontoillogical 10y agoRe Android: No we don't, but I'd be interested to know what we can do with Android to be helpful to you. Send me an email (max at our domain) if you want to talk more. vulns page: yeesh that is slow. This is the first time I'm sharing our vuln pages outside of our logged-in users, and yeah, that index is definitely not ready for public consumption yet.
- pmuk 10y agoIf you wanted to create a useful tool to promote yourselves you could make something for CentOS that allows a user to apply critical security updates only. yum-security doesn't seem to work on CentOS as the repos don't have the correct meta data. Currently that requires a satellite subscription.
- mfukar 10y agoAre you constructing the descriptions by scraping something else? They really need a lot of work.