Skip to content

Add KDE security advisory importer #2178

Open
Tarun-goswamii wants to merge 1 commit intoaboutcode-org:mainfrom
Tarun-goswamii:feature/kde-security-advisories-1939
Open

Add KDE security advisory importer #2178
Tarun-goswamii wants to merge 1 commit intoaboutcode-org:mainfrom
Tarun-goswamii:feature/kde-security-advisories-1939

Conversation

@Tarun-goswamii
Copy link

Issue

Fixes #1939

Summary

Created importer to collect KDE security advisories from https://kde.org/info/security/.

Implementation

  • Fetches all advisory URLs from the KDE security index page
  • Parses both old PGP-signed format (1998-2010s) and new plain text format (2020s+)
  • Extracts CVE IDs with automatic conversion of old CAN- format to CVE- format
  • Collects advisory titles, references, and embedded URLs

Features

  • Supports 134 advisories spanning 1998-2026
  • Handles two different advisory text formats
  • Regex-based CVE and URL extraction
  • Error handling for failed fetches

Testing

  • Unit tests for both advisory formats included
  • Tests CVE extraction and CAN-to-CVE conversion
  • Tests summary extraction from both formats
  • Sample test data included for validation

- Create KdeImporter class to fetch and parse KDE security advisories
- Support both old PGP-signed format and new plain text format
- Extract CVE IDs (including old CAN- format conversion)
- Parse advisory titles/summaries and references
- Add tests for both advisory formats

Fixes aboutcode-org#1939

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: tarun111111 <tarunpuri2544@gmail.com>
@ziadhany ziadhany added the vibe-code Completely AI-generated code label Feb 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

vibe-code Completely AI-generated code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Collect KDE security advisories

3 participants

Comments