[OE-core] [PATCH 1/4] cve-update-db: New recipe to update CVE database
t-keweng at microsoft.com
Tue Jul 9 23:58:59 UTC 2019
I found that the hash function is causing collisions in the generated database such that some CVEs are being overwritten because of the UNIQUE constraint on the HASH column. For example, CVE-2018-1000873 has the same hash of 623198722 as CVE-2018-18338. This results in one of the two CVEs not appearing in the database.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Openembedded-core