diff options
-rw-r--r-- | meta/classes/cve-check.bbclass | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/meta/classes/cve-check.bbclass b/meta/classes/cve-check.bbclass index 1aef00d297..c63ebd56e1 100644 --- a/meta/classes/cve-check.bbclass +++ b/meta/classes/cve-check.bbclass | |||
@@ -277,7 +277,7 @@ def cve_update(d, cve_data, cve, entry): | |||
277 | cve_data[cve] = entry | 277 | cve_data[cve] = entry |
278 | return | 278 | return |
279 | # If we are updating, there might be change in the status | 279 | # If we are updating, there might be change in the status |
280 | bb.debug("Trying CVE entry update for %s from %s to %s" % (cve, cve_data[cve]['abbrev-status'], entry['abbrev-status'])) | 280 | bb.debug(1, "Trying CVE entry update for %s from %s to %s" % (cve, cve_data[cve]['abbrev-status'], entry['abbrev-status'])) |
281 | if cve_data[cve]['abbrev-status'] == "Unknown": | 281 | if cve_data[cve]['abbrev-status'] == "Unknown": |
282 | cve_data[cve] = entry | 282 | cve_data[cve] = entry |
283 | return | 283 | return |
@@ -288,16 +288,16 @@ def cve_update(d, cve_data, cve, entry): | |||
288 | if entry['status'] == "version-in-range" and cve_data[cve]['status'] == "version-not-in-range": | 288 | if entry['status'] == "version-in-range" and cve_data[cve]['status'] == "version-not-in-range": |
289 | # New result from the scan, vulnerable | 289 | # New result from the scan, vulnerable |
290 | cve_data[cve] = entry | 290 | cve_data[cve] = entry |
291 | bb.debug("CVE entry %s update from Patched to Unpatched from the scan result" % cve) | 291 | bb.debug(1, "CVE entry %s update from Patched to Unpatched from the scan result" % cve) |
292 | return | 292 | return |
293 | if entry['abbrev-status'] == "Patched" and cve_data[cve]['abbrev-status'] == "Unpatched": | 293 | if entry['abbrev-status'] == "Patched" and cve_data[cve]['abbrev-status'] == "Unpatched": |
294 | if entry['status'] == "version-not-in-range" and cve_data[cve]['status'] == "version-in-range": | 294 | if entry['status'] == "version-not-in-range" and cve_data[cve]['status'] == "version-in-range": |
295 | # Range does not match the scan, but we already have a vulnerable match, ignore | 295 | # Range does not match the scan, but we already have a vulnerable match, ignore |
296 | bb.debug("CVE entry %s update from Patched to Unpatched from the scan result - not applying" % cve) | 296 | bb.debug(1, "CVE entry %s update from Patched to Unpatched from the scan result - not applying" % cve) |
297 | return | 297 | return |
298 | # If we have an "Ignored", it has a priority | 298 | # If we have an "Ignored", it has a priority |
299 | if cve_data[cve]['abbrev-status'] == "Ignored": | 299 | if cve_data[cve]['abbrev-status'] == "Ignored": |
300 | bb.debug("CVE %s not updating because Ignored" % cve) | 300 | bb.debug(1, "CVE %s not updating because Ignored" % cve) |
301 | return | 301 | return |
302 | bb.warn("Unhandled CVE entry update for %s from %s to %s" % (cve, cve_data[cve], entry)) | 302 | bb.warn("Unhandled CVE entry update for %s from %s to %s" % (cve, cve_data[cve], entry)) |
303 | 303 | ||