Add support for glib importer

[ziadhany]

Related Issues:

• Add glibc advisories #1362
• fedcode-next: Collect existing fix commits and patches open datasets #1697
• [For Review Purpose Only-Do not Merge] First Draft for Glibc Importer #1414

[ziadhany]

GlibcImporterPipeline Logs

/home/ziad-hany/PycharmProjects/vulnerablecode/venv/bin/python3.13 /home/ziad-hany/PycharmProjects/vulnerablecode/manage.py import localhost:8000 --all 
Importing data using glibc_importer_v2
INFO 2026-05-14 21:41:09.343562 UTC Pipeline [GlibcImporterPipeline] starting
INFO 2026-05-14 21:41:09.343704 UTC Step [clone] starting
INFO 2026-05-14 21:41:09.343771 UTC Cloning `git+https://sourceware.org/git/glibc.git`
INFO 2026-05-14 21:42:09.529557 UTC Step [clone] completed in 60 seconds (1.0 minutes)
INFO 2026-05-14 21:42:09.529678 UTC Step [collect_and_store_advisories] starting
INFO 2026-05-14 21:42:09.529974 UTC Collecting 31 advisories
INFO 2026-05-14 21:42:09.876663 UTC Progress: 12% (4/31) ETA: 3 seconds
INFO 2026-05-14 21:42:09.987236 UTC Progress: 22% (7/31) ETA: 2 seconds
INFO 2026-05-14 21:42:10.088847 UTC Progress: 32% (10/31) ETA: 1 seconds
INFO 2026-05-14 21:42:10.213179 UTC Progress: 45% (14/31) ETA: 1 seconds
INFO 2026-05-14 21:42:10.369820 UTC Progress: 58% (18/31) ETA: 1 seconds
INFO 2026-05-14 21:42:10.484080 UTC Progress: 70% (22/31)
INFO 2026-05-14 21:42:10.574791 UTC Progress: 80% (25/31)
INFO 2026-05-14 21:42:10.681842 UTC Progress: 90% (28/31)
INFO 2026-05-14 21:42:10.772482 UTC Successfully collected 30 advisories
INFO 2026-05-14 21:42:10.772594 UTC Step [collect_and_store_advisories] completed in 1 seconds
INFO 2026-05-14 21:42:10.772647 UTC Step [clean_downloads] starting
INFO 2026-05-14 21:42:10.772696 UTC Removing cloned repository
INFO 2026-05-14 21:42:11.083879 UTC Step [clean_downloads] completed in 0 seconds
INFO 2026-05-14 21:42:11.084019 UTC Pipeline completed in 62 seconds (1.0 minutes)

Process finished with exit code 0

from vulnerabilities.models import AdvisoryV2
from django.db.models import Count
duplicates = (
    AdvisoryV2.objects
    .values('avid')
    .annotate(count=Count('id'))
    .filter(count__gt=1)
)
len(duplicates)
Out[2]: 0
AdvisoryV2.objects.count()
Out[3]: 21

[TG1999]

Why gcc and not glibc ?

[ziadhany]

I think this is a typo. Let me update it , I think the PURL should be:

pkg:gnu/glibc or pkg:generic/gnu/glibc

[pombredanne]

Rather than pkg:gnu/glibc or pkg:generic/gnu/glibc I suggest we use the new sid type for GNU as in pkg:sid/gnu.org/glibc@1.2.2

See package-url/purl-spec#516 ... I am working on getting a PR in ASAP.

You can safely starting that for gnu and glibc

[pombredanne]

@mjherzog @johnmhoran ping ... FYI

[TG1999]

LGTM!