SVN: security/cve_reader.py

[shadzik]

Author: shadzik
Date: Mon Jun  2 17:43:00 2008
New Revision: 9789

Modified:
   security/cve_reader.py
Log:
- fix case when someone commits something like pasczus did: "- updated to 0.9.7l (fixes CVE-2006-{2940,2937,3738,4343})"


Modified: security/cve_reader.py
==============================================================================
--- security/cve_reader.py	(original)
+++ security/cve_reader.py	Mon Jun  2 17:43:00 2008
@@ -112,9 +112,17 @@
 								foundcveafterrange = 1
 							
 							# Good, found CVE entries. Extract them!
-							cve_list = re.findall("CVE-[0-9]{4}-[0-9]{4}(?!\.diff|\.patch)", lines[i+cvslog])
+							cve_list = re.findall("(CVE-[0-9]{4}-[0-9]{4}|CVE-[0-9]{4}-\{[0-9\,]+\})(?!\.diff|\.patch)", lines[i+cvslog])
 							for iter in range(len(cve_list)):
-								cve.append(cve_list[iter])
+								if re.match('.*\{', cve_list[iter]):
+									cvemultiarray = cve_list[iter].split("-{")
+									prefix = cvemultiarray[0]
+									cvemultiarray[1] = cvemultiarray[1].strip("}")
+									postfixarray = cvemultiarray[1].split(",")
+									for i in range(len(postfixarray)):
+										cve.append("%s-%s" % (prefix, postfixarray[i]))
+								else:
+									cve.append(cve_list[iter])
 				
 				cvslog = cvslog + 1