获取存在多个热补丁对CVE有效时,匹配正确应用的热补丁
(cherry picked from commit 0c2c73e7ae87a4e45b238793f5d950544d123395)
This commit is contained in:
parent
d771039b3d
commit
0015d11f31
39
0005-match-correctly-applied-hotpatchs.patch
Normal file
39
0005-match-correctly-applied-hotpatchs.patch
Normal file
@ -0,0 +1,39 @@
|
|||||||
|
From 6875f8f6dbe2f7b08cf6a447057bfd4514b83537 Mon Sep 17 00:00:00 2001
|
||||||
|
From: gongzhengtang <gong_zhengtang@163.com>
|
||||||
|
Date: Fri, 30 Jun 2023 11:09:24 +0000
|
||||||
|
Subject: [PATCH] Match the correctly applied hot patches
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
Signed-off-by: gongzhengtang <gong_zhengtang@163.com>
|
||||||
|
---
|
||||||
|
ceres/manages/vulnerability_manage.py | 13 +++++--------
|
||||||
|
1 file changed, 5 insertions(+), 8 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/ceres/manages/vulnerability_manage.py b/ceres/manages/vulnerability_manage.py
|
||||||
|
index 8547abe..cfecb60 100644
|
||||||
|
--- a/ceres/manages/vulnerability_manage.py
|
||||||
|
+++ b/ceres/manages/vulnerability_manage.py
|
||||||
|
@@ -429,14 +429,11 @@ class VulnerabilityManage:
|
||||||
|
if status_code == FAIL or not re.search("base-pkg/hotpatch", hotpatch_list_output):
|
||||||
|
return None
|
||||||
|
|
||||||
|
- for hotpatch_info in [line for line in hotpatch_list_output.split(os.linesep) if line]:
|
||||||
|
- if not hotpatch_info.startswith("CVE"):
|
||||||
|
- continue
|
||||||
|
- _, hot_pkg, _, = [info.strip() for info in hotpatch_info.split()]
|
||||||
|
- if hot_pkg == "base-pkg/hotpatch":
|
||||||
|
- continue
|
||||||
|
- return hot_pkg
|
||||||
|
- return ""
|
||||||
|
+ for hotpatch_info in [line for line in hotpatch_list_output.split(os.linesep) if line.startswith("CVE")]:
|
||||||
|
+ _, hot_pkg, status = hotpatch_info.strip().split()
|
||||||
|
+ if status == "ACTIVED":
|
||||||
|
+ return hot_pkg
|
||||||
|
+ return None
|
||||||
|
|
||||||
|
def _syscare_operate(self, operate, patch_name=None):
|
||||||
|
"""
|
||||||
|
--
|
||||||
|
Gitee
|
||||||
@ -1,6 +1,6 @@
|
|||||||
Name: aops-ceres
|
Name: aops-ceres
|
||||||
Version: v1.2.1
|
Version: v1.2.1
|
||||||
Release: 5
|
Release: 6
|
||||||
Summary: An agent which needs to be adopted in client, it managers some plugins, such as gala-gopher(kpi collection), fluentd(log collection) and so on.
|
Summary: An agent which needs to be adopted in client, it managers some plugins, such as gala-gopher(kpi collection), fluentd(log collection) and so on.
|
||||||
License: MulanPSL2
|
License: MulanPSL2
|
||||||
URL: https://gitee.com/openeuler/%{name}
|
URL: https://gitee.com/openeuler/%{name}
|
||||||
@ -9,6 +9,7 @@ Patch0001: 0001-modify-return-value-when-no-hotpatch-is-matched.patch
|
|||||||
Patch0002: 0002-update-cve-fix-and-cve-scan.patch
|
Patch0002: 0002-update-cve-fix-and-cve-scan.patch
|
||||||
Patch0003: 0003-fix-issue-cve-fix-result-doesn-t-match-log.patch
|
Patch0003: 0003-fix-issue-cve-fix-result-doesn-t-match-log.patch
|
||||||
Patch0004: 0004-update-hotpatch-info-query-func.patch
|
Patch0004: 0004-update-hotpatch-info-query-func.patch
|
||||||
|
Patch0005: 0005-match-correctly-applied-hotpatchs.patch
|
||||||
|
|
||||||
|
|
||||||
BuildRequires: python3-setuptools
|
BuildRequires: python3-setuptools
|
||||||
@ -44,6 +45,9 @@ An agent which needs to be adopted in client, it managers some plugins, such as
|
|||||||
|
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Fri Jun 30 2023 gongzhengtang<gong_zhengtang@163.com> - v1.2.1-6
|
||||||
|
- Match the correctly applied hot patches
|
||||||
|
|
||||||
* Wed Jun 21 2023 wenxin<shusheng.wen@outlook.com> - v1.2.1-5
|
* Wed Jun 21 2023 wenxin<shusheng.wen@outlook.com> - v1.2.1-5
|
||||||
- update hostpatch info query func
|
- update hostpatch info query func
|
||||||
|
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user