]> code.ossystems Code Review - openembedded-core.git/commit
cve-check: Allow multiple entries in CVE_PRODUCT
authorGrygorii Tertychnyi <gtertych@cisco.com>
Mon, 29 Oct 2018 15:13:10 +0000 (17:13 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 29 Oct 2018 17:00:34 +0000 (17:00 +0000)
commit404f75e026393ddc55da87f6f04fb1201cff4e11
tree49e402ba56b9a5546e17baf74a52a028c943538d
parent67f9e9045ab91a9df15876ad73e44ff98f11bf59
cve-check: Allow multiple entries in CVE_PRODUCT

There are both "curl" and "libcurl" CPEs in NVD.
All "curl" CVEs are currently missing in the reports.

Hence, switch "CVE_PRODUCT" to a space separated list.
It is useful for recipes generating several packages,
that have different product names in NVD.

Signed-off-by: Grygorii Tertychnyi <gtertych@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/classes/cve-check.bbclass