aboutcode-org / aboutcode-org/univers

Add helper to split a ranges with patch backports

Offen
#127 0 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
Vorherrschende Sprache
Python
Sterne
50
Forks
29
PR-Merge-Kennzahlen
Keine gemergten PRs in 30 T.

Beschreibung

reported by @kwwall in this [comment](https://www.linkedin.com/feed/update/urn%3Ali%3Aactivity%3A7129861889332793344/?commentUrn=urn%3Ali%3Acomment%3A(activity%3A7129861889332793344%2C7130193407813025795)&dashCommentUrn=urn%3Ali%3Afsd_comment%3A(7130193407813025795%2Curn%3Ali%3Aactivity%3A7129861889332793344)&midToken=AQEFXmditerzrw
)
> Is there a way that this new version notation for dependency and vulnerability ranges can be made to work for back-ported vulnerability patching like Red Hat and other Linux vendors often do? We get a lot of FPs in SCA tools because they don't recognized back-ported patches.

Say you have a range of vulnerable versions from 3.0 to 5.4, and that a patch fix the vulnerability in 5.5 is backported to 3.5 and 4.5, I would like to have a simpler way to obtain a new range looking like this: from 3.0 to before 3.5, from 4.0 to before 4.5, from 5.0 to 5.4

Beitragsleitfaden

Für dieses Repository ist kein Beitragsleitfaden indexiert

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.