Fix openssl importer.

The data source has a CVE-2007-5502 which has weird version.Skip it. Signed-off-by: Shivam Sandbhor <[email protected]>
Hritik14 · Apr 27, 2021 · f9233cc · f9233cc
1 parent 412a429
commit f9233cc
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/vulnerabilities/importers/openssl.py b/vulnerabilities/importers/openssl.py
@@ -83,6 +83,11 @@ def to_advisories(xml_response: str) -> Set[Advisory]:
                         else:
                             continue
 
+                    if cve_id == "CVE-2007-5502":
+                        # This CVE has weird version "fips-1.1.2".This is
+                        # probably a submodule. Skip this for now.
+                        continue
+
                     if info.tag == "affects":
                         # Vulnerable package versions
                         vuln_pkg_versions.append(info.attrib.get("version"))