]> code.ossystems Code Review - openembedded-core.git/commit
cve-update-db-native: consider version suffix when update CVE db
authorLee Chee Yang <chee.yang.lee@intel.com>
Thu, 4 Mar 2021 14:44:06 +0000 (22:44 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sat, 20 Mar 2021 18:50:05 +0000 (18:50 +0000)
commit13cc68197f81bb7c76fa1abecc5dd720b8bdb8d5
tree6119976b0d4e874904f35626e6f229d8b1cf040b
parent93f0bf11ce2b950215a2de79a4ce928cd0b1b7b9
cve-update-db-native: consider version suffix when update CVE db

some record from NVD can merge or split suffix from version, for
example:
  CVE-2017-15906
  "cpe23Uri" : "cpe:2.3:a:openbsd:openssh:5.0:p1:*:*:*:*:*:*"
  "cpe23Uri" : "cpe:2.3:a:openbsd:openssh:4.7p1:*:*:*:*:*:*:*"

in such case include the suffix into version when update local CVE db.

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-core/meta/cve-update-db-native.bb