Stage/vuls
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[WIP]fix(scan): collect a running version of kernel-devel (#1044)

Browse Source 
* fix(scan): collect a running kernel-devel version

* refactor
This commit is contained in:
Kota Kanbe
2020-09-01 14:37:40 +09:00
committed by GitHub
parent 7969b343b0
commit 4f1578b2d6
4 changed files with 54 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
scan/redhatbase.go
View File

@@ -279,13 +279,13 @@ func (o *redhatBase) parseInstalledPackages(stdout string) (models.Packages, mod
// openssl 0 1.0.1e 30.el6.11 x86_64
lines := strings.Split(stdout, "\n")
for _, line := range lines {
if trimed := strings.TrimSpace(line); len(trimed) != 0 {
if trimmed := strings.TrimSpace(line); len(trimmed) != 0 {
pack, err := o.parseInstalledPackagesLine(line)
if err != nil {
return nil, nil, err
}
// Kernel package may be isntalled multiple versions.
// `Kernel` and `kernel-devel` package may be installed multiple versions.
// From the viewpoint of vulnerability detection,
// pay attention only to the running kernel
isKernel, running := isRunningKernel(pack, o.Distro.Family, o.Kernel)