Merge pull request #681 from Allda/rhel_severity

Vulnsrc rhel: handle "none" CVE impact
quay · Jan 2, 2019 · 5cd6a8c · 5cd6a8c
2 parents 3947073 + bd7102d
commit 5cd6a8c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ext/vulnsrc/rhel/rhel.go b/ext/vulnsrc/rhel/rhel.go
@@ -221,7 +221,7 @@ func parseRHSA(ovalReader io.Reader) (vulnerabilities []database.VulnerabilityWi
 			for _, currentCve := range definition.Cves {
 				vulnerability.Name = currentCve.ID
 				vulnerability.Link = currentCve.Href
-				if currentCve.Impact != "" {
+				if currentCve.Impact != "" && currentCve.Impact != "none" {
 					vulnerability.Severity = severity(currentCve.Impact)
 				} else {
 					vulnerability.Severity = severity(definition.Severity)