diff mbox series

[openembedded-core,scarthgap,v1,15/34] meta/lib/oe/cve_check.py: fix patched_cves not updated

Message ID	20260220053443.3006180-15-hetpat@cisco.com
State	New
Headers	show Return-Path: <hetpat@cisco.com> ip: 173.37.142.95, mailfrom: hetpat@cisco.com) IronPort-Data: A9a23:R4i6PqKfeiZAMkHtFE+RhpQlxSXFcZb7ZxGr2PjKsXjdYENS1jcFn DMdDWzTafjbYGOgL9p3PYi2oU5TusWAm4dgGQQd+CA2RRqmiyZq6fd1j6vUF3nPRiEWZBs/t 63yUvGZcoZsCCSa/kvxWlTYhSEU/bmSQbbhA/LzNCl0RAt1IA8skhsLd9QR2uaEuvDnRVnU0 T/Oi5eHYgH9gWQsajl8B5+r8XuDgtyj4Fv0gXRmDRx7lAe2v2UYCpsZOZawIxPQKqFIHvS3T vr017qw+GXU5X8FUrtJRZ6iLyXm6paLVeS/oiI+t5qK23CulQRuukoPD8fwXG8M49m/c3+d/ /0W3XC4YV9B0qQhA43xWTEAe811FfUuFLMqvRFTvOTLp3AqfUcAzN1tVnozGb8Y+N1TJk518 OEXMSwGUQic0rfeLLKTEoGAh+w5J8XteYdasXZ6wHSBUbAtQIvIROPB4towMDUY358VW62BI ZBENHw2ME2ojx5nYj/7DLo+kfuwj2XXeDxDo1XTrq0yi4TW5FIuiei8b4WOKrRmQ+1bk3/C9 nP3rliiPQpKHuyGw2CVrHmF07qncSTTHdh6+KeD3vlyjVuew2YeBBEbWR6wpuO0okq/QM5Eb UsM9ywjqKI/+ECmQp/6RRLQnZKflgQXV9wVF6gx7xuAj/KIpQ2YHWMDCDVGbbTKqfMLeNDj7 XfR9/uBONClmOT9pa61nltMkQ6PBA== IronPort-HdrOrdr: A9a23:H6b2LqnGMGyErKIA0XppD9Lxm3LpDfIr3DAbv31ZSRFFG/FwWf rAoB19726StN9/YhAdcLy7VZVoBEmsl6KdgrNhWYtKIjOHhILAFugLhuHfKn/bakjDH4Vmu5 uIHZITNDSJNykYsS4/izPIaurJB7K8gcaVuds= From: "Het Patel -X (hetpat - E INFOCHIPS PRIVATE LIMITED at Cisco)" <hetpat@cisco.com> To: openembedded-core@lists.openembedded.org Cc: xe-linux-external@cisco.com, vchavda@cisco.com Subject: [openembedded-core] [scarthgap] [PATCH v1 15/34] meta/lib/oe/cve_check.py: fix patched_cves not updated Date: Thu, 19 Feb 2026 21:34:24 -0800 Message-Id: <20260220053443.3006180-15-hetpat@cisco.com> In-Reply-To: <20260220053443.3006180-1-hetpat@cisco.com> References: <20260220053443.3006180-1-hetpat@cisco.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[openembedded-core,scarthgap,v1,01/34] cve-check: encode affected product/vendor in CVE_STATUS \| expand [openembedded-core,scarthgap,v1,01/34] cve-check: encode affected product/vendor in CVE_STATUS [openembedded-core,scarthgap,v1,02/34] cve_check: Update selftest with new status detail [openembedded-core,scarthgap,v1,03/34] cve-check: annotate CVEs during analysis [openembedded-core,scarthgap,v1,04/34] cve-check-map: add new statuses [openembedded-core,scarthgap,v1,05/34] selftest: add test_product_match [openembedded-core,scarthgap,v1,06/34] cve-check: remove the TEXT format support [openembedded-core,scarthgap,v1,07/34] cve-check-update-nvd2-native: Incremement DL_DIR database lo… [openembedded-core,scarthgap,v1,08/34] cve-check: add field "modified" to JSON report [openembedded-core,scarthgap,v1,09/34] cve-check: do not skip cve status description after : [openembedded-core,scarthgap,v1,10/34] cve-check: fix malformed cve status description with : chara… [openembedded-core,scarthgap,v1,11/34] cve-check: restore CVE_CHECK_SHOW_WARNINGS functionality [openembedded-core,scarthgap,v1,12/34] cve-check: fix cvesInRecord [openembedded-core,scarthgap,v1,13/34] cve-check: Fix errors in log lines [openembedded-core,scarthgap,v1,14/34] cve-check: Rework patch parsing [openembedded-core,scarthgap,v1,15/34] meta/lib/oe/cve_check.py: fix patched_cves not updated [openembedded-core,scarthgap,v1,16/34] cve-check: allow feed choice [openembedded-core,scarthgap,v1,17/34] cve-update-db-native: restore [openembedded-core,scarthgap,v1,18/34] cve-update-db-native: update structure [openembedded-core,scarthgap,v1,19/34] cve-update-db-native: add the fkie source [openembedded-core,scarthgap,v1,20/34] cve-check: change the default feed [openembedded-core,scarthgap,v1,21/34] cve-check: fix debug message [openembedded-core,scarthgap,v1,22/34] spdx30: Allow VEX Justification to be configurable [openembedded-core,scarthgap,v1,23/34] cve-update-db-native: fix fetcher for CVEs missing nodes [openembedded-core,scarthgap,v1,24/34] cve-update-db-native: Use a local copy of the database durin… [openembedded-core,scarthgap,v1,25/34] cve-update-db-native: Handle BB_NO_NETWORK and missing db [openembedded-core,scarthgap,v1,26/34] cve-update-db-native: log a little more [openembedded-core,scarthgap,v1,27/34] cve-update: decrease update interval to 23 hours [openembedded-core,scarthgap,v1,28/34] cve-update: remove cleanup of db_file in downloads [openembedded-core,scarthgap,v1,29/34] cve-update-db-native: Fix FKIE CVE accessVector parsing [openembedded-core,scarthgap,v1,30/34] cve-update-db-native: FKIE CVE parsing: Use Secondary metric [openembedded-core,scarthgap,v1,31/34] cve-update: log timestamps and add force update for future t… [openembedded-core,scarthgap,v1,32/34] cve-update-db-native: pycodestyle fixes [openembedded-core,scarthgap,v1,33/34] cve-update-nvd2-native: pycodestyle fixes [openembedded-core,scarthgap,v1,34/34] cve-update: Avoid NFS caching issues

Commit Message

Het Patel -X (hetpat - E INFOCHIPS PRIVATE LIMITED at Cisco) Feb. 20, 2026, 5:34 a.m. UTC

From: hongxu <hongxu.jia@eng.windriver.com>

Due to commit [cve-check: Rework patch parsing] applied, it missed to
update patched_cves dictionary if cve_id not in patched_cves

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 08796a8153666d93bb622c6a7497a85cef4def42)
Signed-off-by: Het Patel <hetpat@cisco.com>
---
 meta/lib/oe/cve_check.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff mbox series

Patch

diff --git a/meta/lib/oe/cve_check.py b/meta/lib/oe/cve_check.py
index c1f36db775..8da03b6865 100644
--- a/meta/lib/oe/cve_check.py
+++ b/meta/lib/oe/cve_check.py
@@ -170,7 +170,7 @@  def get_patched_cves(d):
         patch_file = bb.fetch.decodeurl(url)[2]
         for cve_id in parse_cves_from_patch_file(patch_file):
             if cve_id not in patched_cves:
-                {
+                patched_cves[cve_id] = {
                     "abbrev-status": "Patched",
                     "status": "fix-file-included",
                     "resource": [patch_file],