diff options
| author | Jonathan Schnitzler <jonathan.schnitzler@faro.com> | 2025-08-24 16:57:44 +0200 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2025-08-28 10:47:08 +0100 |
| commit | 8b5c222b081f0c6e34cbe8e24e37fceaee86789d (patch) | |
| tree | 44f96fac601755169040eb8446c8a5d7157934eb | |
| parent | bb037c228c9aa9edd29cd11dcbb309051671aa93 (diff) | |
| download | poky-8b5c222b081f0c6e34cbe8e24e37fceaee86789d.tar.gz | |
cve-update-db-native: Fix FKIE CVE accessVector parsing
Use "attackVector" for CVSS >= 3 as it only CVSS v2 uses "accessVector".
(From OE-Core rev: 7e4d566445a8cbe1e540e20837d45692d81af77f)
Signed-off-by: Jonathan Schnitzler <jonathan.schnitzler@faro.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
| -rw-r--r-- | meta/recipes-core/meta/cve-update-db-native.bb | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/meta/recipes-core/meta/cve-update-db-native.bb b/meta/recipes-core/meta/cve-update-db-native.bb index 43cafb52b1..87e5a3edaa 100644 --- a/meta/recipes-core/meta/cve-update-db-native.bb +++ b/meta/recipes-core/meta/cve-update-db-native.bb | |||
| @@ -352,7 +352,7 @@ def update_db_fkie(conn, jsondata): | |||
| 352 | try: | 352 | try: |
| 353 | for m in elt['metrics']['cvssMetricV30']: | 353 | for m in elt['metrics']['cvssMetricV30']: |
| 354 | if m['type'] == 'Primary': | 354 | if m['type'] == 'Primary': |
| 355 | accessVector = m['cvssData']['accessVector'] | 355 | accessVector = m['cvssData']['attackVector'] |
| 356 | vectorString = m['cvssData']['vectorString'] | 356 | vectorString = m['cvssData']['vectorString'] |
| 357 | cvssv3 = m['cvssData']['baseScore'] | 357 | cvssv3 = m['cvssData']['baseScore'] |
| 358 | except KeyError: | 358 | except KeyError: |
| @@ -361,7 +361,7 @@ def update_db_fkie(conn, jsondata): | |||
| 361 | try: | 361 | try: |
| 362 | for m in elt['metrics']['cvssMetricV31']: | 362 | for m in elt['metrics']['cvssMetricV31']: |
| 363 | if m['type'] == 'Primary': | 363 | if m['type'] == 'Primary': |
| 364 | accessVector = m['cvssData']['accessVector'] | 364 | accessVector = m['cvssData']['attackVector'] |
| 365 | vectorString = m['cvssData']['vectorString'] | 365 | vectorString = m['cvssData']['vectorString'] |
| 366 | cvssv3 = m['cvssData']['baseScore'] | 366 | cvssv3 = m['cvssData']['baseScore'] |
| 367 | except KeyError: | 367 | except KeyError: |
| @@ -370,7 +370,7 @@ def update_db_fkie(conn, jsondata): | |||
| 370 | try: | 370 | try: |
| 371 | for m in elt['metrics']['cvssMetricV40']: | 371 | for m in elt['metrics']['cvssMetricV40']: |
| 372 | if m['type'] == 'Primary': | 372 | if m['type'] == 'Primary': |
| 373 | accessVector = m['cvssData']['accessVector'] | 373 | accessVector = m['cvssData']['attackVector'] |
| 374 | vectorString = m['cvssData']['vectorString'] | 374 | vectorString = m['cvssData']['vectorString'] |
| 375 | cvssv4 = m['cvssData']['baseScore'] | 375 | cvssv4 = m['cvssData']['baseScore'] |
| 376 | except KeyError: | 376 | except KeyError: |
