mirror of
https://git.yoctoproject.org/poky
synced 2026-09-13 09:49:32 +02:00
cve-update-db-native: use SQL placeholders instead of format strings
(From OE-Core rev: 91770338f76ef35f3c4eeac216eb9d2b3188e575) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
7f5f884e55
commit
c0017bee41
@@ -62,7 +62,7 @@ python do_populate_cve_db() {
|
|||||||
break
|
break
|
||||||
|
|
||||||
# Compare with current db last modified date
|
# Compare with current db last modified date
|
||||||
c.execute("select DATE from META where YEAR = '%d'" % year)
|
c.execute("select DATE from META where YEAR = ?", (year,))
|
||||||
meta = c.fetchone()
|
meta = c.fetchone()
|
||||||
if not meta or meta[0] != last_modified:
|
if not meta or meta[0] != last_modified:
|
||||||
# Update db with current year json file
|
# Update db with current year json file
|
||||||
|
|||||||
Reference in New Issue
Block a user