1712d1c2045b49899fa5caa6de64c6d432f49cab to aa73d8fea0aeef9b590122efbcc173d0a5fcdf4f · Debian Security Tracker / security-tracker · GitLab

Commits on Source (2)

Relax extraction for CVE description from allitems.txt file · 42639745

Salvatore Bonaccorso authored Mar 29, 2019



MITRE recently did changes on the infrastructure to submit CVE entries
and slightly changed as well format of produced files.

Recent entries do not seem to contain anymore a strict \n\n\n separation
between the CVE description further from other notes attached to the
entry.

Slightly relax the regular expression but still try to catch correctly
the description only in the description() subroutine by still anchoring
to two \n\n, and two following \n\n to seperate the description.

Signed-off-by: Salvatore Bonaccorso <carnil@debian.org>

42639745

Merge branch 'check-new-issues-parse-description' into 'master' · aa73d8fe
Salvatore Bonaccorso authored Jun 21, 2019
```
Relax extraction for CVE description from allitems.txt file

See merge request !42
```
aa73d8fe

Show whitespace changes

Inline Side-by-side

View file @ aa73d8fe

@@ -448,7 +448,7 @@ sub description {
 	defined $data->{$name}->{CVE} or return "";
 	${$data->{$name}->{CVE}} =~ /\n\n(.*\n)\n\n/s;
 	${$data->{$name}->{CVE}} =~ /\n\n(.*\n)\n/s;
 	my $desc = $1;
 	$desc =~ s/\n\n+/\n/;
-...