/usr/share/openvas/scap/cpe_update.xsl is in openvas-manager-common 7.0.2-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 | <?xml version="1.0" encoding="UTF-8"?>
<!--
OpenVAS
$Id: cpe_update.xsl 20229 2014-09-01 13:13:29Z mwiegand $
Description: Generate SQL (SQLite compatible) queries to update the CPE database.
Authors:
Henri Doreau <henri.doreau@greenbone.net>
Copyright:
Copyright (C) 2011 Greenbone Networks GmbH
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2
of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
-->
<xsl:stylesheet version="1.0"
xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
xmlns:scap-core="http://scap.nist.gov/schema/scap-core/0.3"
xmlns:meta="http://scap.nist.gov/schema/cpe-dictionary-metadata/0.2"
xmlns:ns6="http://scap.nist.gov/schema/scap-core/0.1"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:config="http://scap.nist.gov/schema/configuration/0.1"
xmlns:cpe="http://cpe.mitre.org/dictionary/2.0"
xmlns:str="http://exslt.org/strings"
xsi:schemaLocation="http://scap.nist.gov/schema/configuration/0.1 http://nvd.nist.gov/schema/configuration_0.1.xsd http://scap.nist.gov/schema/scap-core/0.3 http://nvd.nist.gov/schema/scap-core_0.3.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.2.xsd http://scap.nist.gov/schema/scap-core/0.1 http://nvd.nist.gov/schema/scap-core_0.1.xsd http://scap.nist.gov/schema/cpe-dictionary-metadata/0.2 http://nvd.nist.gov/schema/cpe-dictionary-metadata_0.2.xsd"
extension-element-prefixes="str"
>
<xsl:output method="text"/>
<xsl:template match="cpe:cpe-item">
<xsl:variable name="decoded_name"
select='str:replace(
str:replace(
str:decode-uri(@name),
"%7E", "~"),
"'", "''")'/>
INSERT OR REPLACE INTO cpes
(uuid, name, title, creation_time, modification_time,
status, deprecated_by_id, nvd_id)
VALUES ('<xsl:value-of select="$decoded_name"/>',
'<xsl:value-of select="$decoded_name"/>',
'<xsl:value-of select='str:replace(cpe:title[@xml:lang = "en-US"], "'", "''")'/>',
strftime('%s', '<xsl:value-of select="meta:item-metadata/@modification-date"/>'),
strftime('%s', '<xsl:value-of select="meta:item-metadata/@modification-date"/>'),
'<xsl:value-of select="meta:item-metadata/@status"/>',
<xsl:call-template name="value_or_null">
<xsl:with-param name="value" select="meta:item-metadata/@deprecated-by-nvd-id"/>
</xsl:call-template>,
'<xsl:value-of select="meta:item-metadata/@nvd-id"/>'
);
</xsl:template>
<xsl:template match="cpe:generator"/>
<xsl:template match="/">
BEGIN TRANSACTION;
<xsl:apply-templates/>
COMMIT;
</xsl:template>
<xsl:template name="value_or_null">
<xsl:param name="value"/>
<xsl:choose>
<xsl:when test="$value">
<xsl:value-of select="$value"/>
</xsl:when>
<xsl:otherwise>
<xsl:text>NULL</xsl:text>
</xsl:otherwise>
</xsl:choose>
</xsl:template>
</xsl:stylesheet>
|