From 7e72eb10b66bfddb865e184e0dc56a839c411e70 Mon Sep 17 00:00:00 2001 From: Quentin Machu Date: Thu, 14 Jan 2016 15:58:33 -0500 Subject: [PATCH] updater: ignore Debian's "temp" vulnerabilities --- updater/fetchers/debian/debian.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/updater/fetchers/debian/debian.go b/updater/fetchers/debian/debian.go index a8e6fb9e..b566c89c 100644 --- a/updater/fetchers/debian/debian.go +++ b/updater/fetchers/debian/debian.go @@ -143,8 +143,8 @@ func parseDebianJSON(data *jsonData) (vulnerabilities []database.Vulnerability, continue } - // Skip if the status is not determined. - if releaseNode.Status == "undetermined" { + // Skip if the status is not determined or the vulnerability is a temporary one. + if !strings.HasPrefix(vulnName, "CVE-") || releaseNode.Status == "undetermined" { continue }