]> code.ossystems Code Review - openembedded-core.git/commit
cve-check: Consider CVE that affects versions with less than operator
authorPierre Le Magourou <pierre.lemagourou@softbankrobotics.com>
Wed, 19 Jun 2019 13:59:40 +0000 (15:59 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 19 Jun 2019 22:08:59 +0000 (23:08 +0100)
commit3bf63bc60848d91e90c23f6d854d22b78832aa2d
treeb8a0230a1766e2e71ec5b235704b217e5de07caf
parent7f62a20b32a3d42f04ec58786a7d0db68ef1bb05
cve-check: Consider CVE that affects versions with less than operator

In the NVD json CVE feed, affected versions can be strictly matched to a
version, but they can also be matched with the operator '<='.

Add a new condition in the sqlite query to match affected versions that
are defined with the operator '<='. Then use LooseVersion to discard all
versions that are not relevant.

Signed-off-by: Pierre Le Magourou <pierre.lemagourou@softbankrobotics.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/classes/cve-check.bbclass