diff options
author | Ross Burton <ross.burton@arm.com> | 2023-06-23 13:32:49 +0100 |
---|---|---|
committer | Steve Sakoman <steve@sakoman.com> | 2023-07-13 07:03:17 -1000 |
commit | 122c106794b3bfe2fede6d3de8e0a8ec8b856c41 (patch) | |
tree | 3761da425efde4cb3d7b0ee834a60cbdcfbe906b /meta/site/common-linux | |
parent | 65c2f76dca2f9af62fe188e5d0ab0a7c59ef0098 (diff) | |
download | poky-122c106794b3bfe2fede6d3de8e0a8ec8b856c41.tar.gz |
cve-update-nvd2-native: handle all configuration nodes, not just first
Some CVEs, such as CVE-2013-6629, list multiple configurations which are
vulnerable. The current JSON parser only considers the first
configuration.
Instead, consider every configuration. We don't yet handle the AND/OR
logical operators, but this is a step in the right direction.
(From OE-Core rev: e521d6ce48d3b04eb2d53c710bba18593a908fe3)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e1bf4f6dd686055fe9a8bdcc3f739eac2807bae0)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'meta/site/common-linux')
0 files changed, 0 insertions, 0 deletions