Skip to content

Instantly share code, notes, and snippets.

@tiberiosantos
Last active April 18, 2018 15:36
Show Gist options
  • Select an option

  • Save tiberiosantos/9521b0a2229106e18c393fec6b874b14 to your computer and use it in GitHub Desktop.

Select an option

Save tiberiosantos/9521b0a2229106e18c393fec6b874b14 to your computer and use it in GitHub Desktop.
Script to fetch the last security fixes update list of debian sid to upgrade testing distribution
#!/usr/bin/env python3
# -*- coding: utf-8 -*-
#
# The MIT License (MIT)
#
# Copyright (c) 2018 Tiberio A. Santos
#
# Permission is hereby granted, free of charge, to any person obtaining
# a copy of this software and associated documentation files (the "Software"),
# to deal in the Software without restriction, including without limitation
# the rights to use, copy, modify, merge, publish, distribute, sublicense,
# and/or sell copies of the Software, and to permit persons to whom the
# Software is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in
# all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
# SOFTWARE.
#
# Script to fetch the last security fixes update list of debian sid for upgrade
# the testing distribution.
# You need enable APT pinning (https://wiki.debian.org/AptPreferences)
#
# Usage:
# apt -t unstable install $(python3 fetch-sid-security.py)
from sys import stderr, stdout
import requests
from apt import Cache
from bs4 import BeautifulSoup as bs
cache = Cache()
timeout = 1.0
try:
page = requests.get(
'https://security-tracker.debian.org/tracker/status/release/testing',
timeout=timeout)
except requests.RequestException:
stderr.write(
'\033[01;31mError\033[01;00m: The security tracker is offline!\n')
exit()
# get table lines from request.
soup = bs(page.text, 'lxml')
table = soup.find('table')
rows = table.find_all('tr')
fix = []
# get package source names from table, which have been fixed in unstable.
for row in rows:
cols = [c.text.strip() for c in row.find_all('td')]
if len(cols) > 4 and cols[0] and cols[4] == 'fixed in unstable':
fix.append(cols[0])
# get only installed packages from fixed packages list.
fix = [
p.name for p in cache
if p.versions[0].source_name in fix and p.is_installed
]
stdout.write(' '.join(fix))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment