Author: shadzik
Date: Mon Jun  2 17:43:00 2008
New Revision: 9789

Modified:
   security/cve_reader.py
Log:
- fix case when someone commits something like pasczus did: "- updated to 
0.9.7l (fixes CVE-2006-{2940,2937,3738,4343})"


Modified: security/cve_reader.py
==============================================================================
--- security/cve_reader.py      (original)
+++ security/cve_reader.py      Mon Jun  2 17:43:00 2008
@@ -112,9 +112,17 @@
                                                                
foundcveafterrange = 1
                                                        
                                                        # Good, found CVE 
entries. Extract them!
-                                                       cve_list = 
re.findall("CVE-[0-9]{4}-[0-9]{4}(?!\.diff|\.patch)", lines[i+cvslog])
+                                                       cve_list = 
re.findall("(CVE-[0-9]{4}-[0-9]{4}|CVE-[0-9]{4}-\{[0-9\,]+\})(?!\.diff|\.patch)",
 lines[i+cvslog])
                                                        for iter in 
range(len(cve_list)):
-                                                               
cve.append(cve_list[iter])
+                                                               if 
re.match('.*\{', cve_list[iter]):
+                                                                       
cvemultiarray = cve_list[iter].split("-{")
+                                                                       prefix 
= cvemultiarray[0]
+                                                                       
cvemultiarray[1] = cvemultiarray[1].strip("}")
+                                                                       
postfixarray = cvemultiarray[1].split(",")
+                                                                       for i 
in range(len(postfixarray)):
+                                                                               
cve.append("%s-%s" % (prefix, postfixarray[i]))
+                                                               else:
+                                                                       
cve.append(cve_list[iter])
                                
                                cvslog = cvslog + 1
                        
_______________________________________________
pld-cvs-commit mailing list
[email protected]
http://lists.pld-linux.org/mailman/listinfo/pld-cvs-commit

Reply via email to