Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error in running openSSL importer #1747

Open
TG1999 opened this issue Jan 16, 2025 · 1 comment · May be fixed by #1765
Open

Error in running openSSL importer #1747

TG1999 opened this issue Jan 16, 2025 · 1 comment · May be fixed by #1765

Comments

@TG1999
Copy link
Contributor

TG1999 commented Jan 16, 2025

Importing data using vulnerabilities.importers.openssl.OpensslImporter
Error while fetching https://www.openssl.org/news/vulnerabilities.xml: 404
Traceback (most recent call last):
File "/app/vulnerabilities/management/commands/import.py", line 70, in import_data
ImportRunner(importer).run()
File "/app/vulnerabilities/import_runner.py", line 61, in run
count = self.process_advisories(advisory_datas=advisory_datas, importer_name=importer_name)
File "/app/vulnerabilities/import_runner.py", line 101, in process_advisories
for data in advisory_datas:
File "/app/vulnerabilities/importers/openssl.py", line 51, in parse_vulnerabilities
root = DET.fromstring(xml_response)
File "/usr/local/lib/python3.9/site-packages/defusedxml/common.py", line 126, in fromstring
parser.feed(text)
File "/usr/local/lib/python3.9/xml/etree/ElementTree.py", line 1720, in feed
self.parser.Parse(data, False)
TypeError: a bytes-like object is required, not 'NoneType'
Failed to run importer vulnerabilities.importers.openssl.OpensslImporter. Continuing...

@kunalsz
Copy link

kunalsz commented Jan 25, 2025

@TG1999 The vulnerabilities page for OpenSSL has been updated to https://openssl-library.org/news/vulnerabilities/index.html which is no longer an xml file which was parsed to scrape the advisory data , Hence the OpenSSL importer needs to be made again from scratch. Can I proceed with that?

@kunalsz kunalsz linked a pull request Jan 29, 2025 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants