diff options
-rw-r--r-- | meta/classes/cve-check.bbclass | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/meta/classes/cve-check.bbclass b/meta/classes/cve-check.bbclass index 6e10dd915a..58abb0da1f 100644 --- a/meta/classes/cve-check.bbclass +++ b/meta/classes/cve-check.bbclass | |||
@@ -278,7 +278,7 @@ def cve_update(d, cve_data, cve, entry): | |||
278 | cve_data[cve] = entry | 278 | cve_data[cve] = entry |
279 | return | 279 | return |
280 | # If we are updating, there might be change in the status | 280 | # If we are updating, there might be change in the status |
281 | bb.debug("Trying CVE entry update for %s from %s to %s" % (cve, cve_data[cve]['abbrev-status'], entry['abbrev-status'])) | 281 | bb.debug(1, "Trying CVE entry update for %s from %s to %s" % (cve, cve_data[cve]['abbrev-status'], entry['abbrev-status'])) |
282 | if cve_data[cve]['abbrev-status'] == "Unknown": | 282 | if cve_data[cve]['abbrev-status'] == "Unknown": |
283 | cve_data[cve] = entry | 283 | cve_data[cve] = entry |
284 | return | 284 | return |
@@ -289,16 +289,16 @@ def cve_update(d, cve_data, cve, entry): | |||
289 | if entry['status'] == "version-in-range" and cve_data[cve]['status'] == "version-not-in-range": | 289 | if entry['status'] == "version-in-range" and cve_data[cve]['status'] == "version-not-in-range": |
290 | # New result from the scan, vulnerable | 290 | # New result from the scan, vulnerable |
291 | cve_data[cve] = entry | 291 | cve_data[cve] = entry |
292 | bb.debug("CVE entry %s update from Patched to Unpatched from the scan result" % cve) | 292 | bb.debug(1, "CVE entry %s update from Patched to Unpatched from the scan result" % cve) |
293 | return | 293 | return |
294 | if entry['abbrev-status'] == "Patched" and cve_data[cve]['abbrev-status'] == "Unpatched": | 294 | if entry['abbrev-status'] == "Patched" and cve_data[cve]['abbrev-status'] == "Unpatched": |
295 | if entry['status'] == "version-not-in-range" and cve_data[cve]['status'] == "version-in-range": | 295 | if entry['status'] == "version-not-in-range" and cve_data[cve]['status'] == "version-in-range": |
296 | # Range does not match the scan, but we already have a vulnerable match, ignore | 296 | # Range does not match the scan, but we already have a vulnerable match, ignore |
297 | bb.debug("CVE entry %s update from Patched to Unpatched from the scan result - not applying" % cve) | 297 | bb.debug(1, "CVE entry %s update from Patched to Unpatched from the scan result - not applying" % cve) |
298 | return | 298 | return |
299 | # If we have an "Ignored", it has a priority | 299 | # If we have an "Ignored", it has a priority |
300 | if cve_data[cve]['abbrev-status'] == "Ignored": | 300 | if cve_data[cve]['abbrev-status'] == "Ignored": |
301 | bb.debug("CVE %s not updating because Ignored" % cve) | 301 | bb.debug(1, "CVE %s not updating because Ignored" % cve) |
302 | return | 302 | return |
303 | bb.warn("Unhandled CVE entry update for %s from %s to %s" % (cve, cve_data[cve], entry)) | 303 | bb.warn("Unhandled CVE entry update for %s from %s to %s" % (cve, cve_data[cve], entry)) |
304 | 304 | ||