Mailing List Archive: Rewritten XSA status page, xsa.json

On 15/04/2024 3:14 pm, George Dunlap wrote:
> Hey all,
>
> Some of you may have noticed that xenbis.xenproject.org/xsa/ doesn't
> currently list XSA-456. This has prompted me to rewrite the perl code
> which generates that area of the webpage into golang, which is much
> easier for the current security team to understand and modify. The
> draft replacement is here:
>
> https://xenbits.xenproject.org/people/gdunlap/xsa-draft/
>
> In particular, if you use `xsa.json` for any purpose, let me know if
> you have any issues. If I don't hear any objections I'll replace the
> website generation code on Wednesday.

As I said on Friday, LGTM.

I'm tempted to say put it live now, announce it on Matrix and ask for
people to point out issues that they find.

Or post your draft link and ask people to look at that? It's the
downstreams who are more likely to notice problems...

But a tangent while we're here. How difficult would it be to get some
basic info about XSAs 1-25 on this page?

We have the primary advisory-*.txt's in xsa.git at least, and going to
the wiki isn't great.

~Andrew