e-m-b-a / emba

EMBA - The firmware security analyzer
https://www.securefirmware.de
GNU General Public License v3.0
2.49k stars 223 forks source link

Version string fixes for isc:dhcp and gnu:glibc #1150

Closed gluesmith2021 closed 1 month ago

gluesmith2021 commented 1 month ago

Fixes version mismatches

gnu:glibc can be matched with a string that sed fails to replace with gnu:glibc:version. Later on, in F20, glibc is ignored because of a "bad version format" and CVEs are not fetched

ISC DHCP client binaries match isc:dhcp_client product name. No CVE are found, whatever the version, since the NVD database uses isc:dhcp for the client, not isc:dhcp_client

Proper product:version is returned and corresponding CVEs are reported

No breaking change

m-1-k-3 commented 1 month ago

Thank you for your contribution.