diff options
| author | Ross Burton <ross.burton@arm.com> | 2023-06-23 13:32:49 +0100 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2023-07-13 06:42:46 -1000 |
| commit | 62727653aa480c23abc289ee7821508df5944d78 (patch) | |
| tree | c94184d5f693a233c3500c7e9587d39169270750 /scripts/lib/buildstats.py | |
| parent | fdd68984644184ec8a189ce5e284c151dbba9fde (diff) | |
| download | poky-62727653aa480c23abc289ee7821508df5944d78.tar.gz | |
cve-update-nvd2-native: handle all configuration nodes, not just first
Some CVEs, such as CVE-2013-6629, list multiple configurations which are
vulnerable. The current JSON parser only considers the first
configuration.
Instead, consider every configuration. We don't yet handle the AND/OR
logical operators, but this is a step in the right direction.
(From OE-Core rev: 7614e00b9491e5d4d6df5492f72613a56ab390d7)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e1bf4f6dd686055fe9a8bdcc3f739eac2807bae0)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'scripts/lib/buildstats.py')
0 files changed, 0 insertions, 0 deletions