Links to OpenSSL security advisories are broken about web HOT 13 CLOSED

https://openssl.org/news/secjson/CVE-2002-0659.json does not redirect to https://openssl-library.org/news/secjson/CVE-2002-0659.json and https://openssl-library.org/news/secjson/ has no directory listing either.

It should be fixed now

from web.

Both issues are being worked on now to resolve - thanks for noting the problem.

from web.

The original files of the form https://www.openssl.org/news/secadv/20240627.txt are all accessible now (only the 2024 files were missing from the conversion of the website and that has been fixed). The incorrect links on the vulnerabilities page has been updated.

Thanks for pointing out the issue - we are working through a range of missing redirects and broken links as quickly as we can.

from web.

This has been fixed. Thanks for reporting. Please check.

from web.

Thank you! Note there is no directory listing at https://openssl-library.org/news/secadv/ so no way to discover a list.
See also #483

from web.

https://openssl.org/news/secjson/CVE-2002-0659.json does not redirect to https://openssl-library.org/news/secjson/CVE-2002-0659.json and https://openssl-library.org/news/secjson/ has no directory listing either.

from web.

@vavroch2010 @quarckster ^

from web.

Do you need help to fix these issues? Would you accept patches?

In which git can I find the data files for these advisories and where is the code for the web site?

from web.

Unfortunately the new web repository is currently not public.

from web.

@t8m Thanks for the quick reply! Any reason for public data not being public? It feels kinda weird 🤓

from web.

@t8m related to #483 does this mean that the only way to collect your vulnerability data is now to scrape the web page at https://openssl-library.org/news/vulnerabilities/index.html ?

Also: https://openssl-library.org/news/secjson/CVE-2024-5535.json does not exists but https://openssl-library.org/news/secjson/CVE-2002-0659.json does so it seems that the JSON is not consistently present.

from web.

Unfortunately the new web repository is currently not public.

I will take care of it

from web.

I fixed the redirects. As of directory listing, it will take more time to implement.

from web.