summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRoss Burton <ross.burton@intel.com>2019-07-17 11:45:38 +0100
committerRichard Purdie <richard.purdie@linuxfoundation.org>2019-07-18 12:15:51 +0100
commit91770338f76ef35f3c4eeac216eb9d2b3188e575 (patch)
tree30fd7d6644719e3cb37d088825394d3bdaab0cbd
parent0598ccdcb31e16f1d1227197591b10ba441fcfe2 (diff)
downloadopenembedded-core-91770338f76ef35f3c4eeac216eb9d2b3188e575.tar.gz
cve-update-db-native: use SQL placeholders instead of format strings
Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-rw-r--r--meta/recipes-core/meta/cve-update-db-native.bb2
1 files changed, 1 insertions, 1 deletions
diff --git a/meta/recipes-core/meta/cve-update-db-native.bb b/meta/recipes-core/meta/cve-update-db-native.bb
index e16c41a72f..72d1f48835 100644
--- a/meta/recipes-core/meta/cve-update-db-native.bb
+++ b/meta/recipes-core/meta/cve-update-db-native.bb
@@ -62,7 +62,7 @@ python do_populate_cve_db() {
break
# Compare with current db last modified date
- c.execute("select DATE from META where YEAR = '%d'" % year)
+ c.execute("select DATE from META where YEAR = ?", (year,))
meta = c.fetchone()
if not meta or meta[0] != last_modified:
# Update db with current year json file