psecio/versionscan — pull request #7 by xsist10 (2014-12-06 23:27:37+00:00)
Title: Ubuntu/Debian/Redhat patch version checker

Added support for determining if patched versions are secure against vulnerabilities.

The logic works as follows:
* Perform regular check scan
* Detect if version is a patched version
* If so, then find a match in the patch lists
* Examine that patch and all patches for the same branch backwards until all patches have been checked
* For each patch, mark off the CVE checks that were patched in that release

This should be fairly accurate but we may need to monitor it in the wild (where there may be a lot more patch releases than I've been able to find).