3

Debian has a JSON file containing all CVE<->Fixed package versions map. Link: https://security-tracker.debian.org/tracker/data/json

Does Ubuntu have something similar?

2

There is the Ubuntu Security Advisory. It provides a mailing list, RSS feed, and Atom feed.

There is no API for historical data, according to a similar question on AskUbuntu.

  • Thank you for the replay. The feeds only contains the latest vulnerabilities without historic data. I'm looking for en exhaustive list. But thank you for the replay. – drdrek Jun 18 '18 at 11:21
  • @drdrek See my update. This question was also asked on AskUbuntu. – forest Jun 19 '18 at 3:06
  • 1
    Just for completeness sake I would like to say that there is a better way to programmatically go over historic security information. We ended up going over the Ubuntu security repository getting the information by iterating over their files: bazaar.launchpad.net/~ubuntu-security/ubuntu-cve-tracker/master/…. I will keep your answer as the accepted answer because this is a very niche solution that is probably not relevant for most people. Its very disappointing that a such large distribution like Ubuntu lags behind so much on security visibility. – drdrek Jun 27 '18 at 13:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.