]> code.ossystems Code Review - openembedded-core.git/commitdiff
cve-check: update link to NVD website for CVE details
authorMichael Opdenacker <michael.opdenacker@bootlin.com>
Thu, 5 Aug 2021 15:51:02 +0000 (17:51 +0200)
committerAnuj Mittal <anuj.mittal@intel.com>
Mon, 9 Aug 2021 02:19:38 +0000 (10:19 +0800)
The old URL schema
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-ID
now redirects to
https://nvd.nist.gov/vuln/detail/CVE-ID

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 57adb57a9d9b08c08ab606ec7b561792e4f4ff2d)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
meta/classes/cve-check.bbclass

index 7cc2a703db83fd1945c00a0d0ea65a273da08769..246393338c138a7008aa1bad7424d643e7a79d74 100644 (file)
@@ -355,7 +355,7 @@ def cve_write_data(d, patched, unpatched, whitelisted, cve_data):
     if include_layers and layer not in include_layers:
         return
 
-    nvd_link = "https://web.nvd.nist.gov/view/vuln/detail?vulnId="
+    nvd_link = "https://nvd.nist.gov/vuln/detail/"
     write_string = ""
     unpatched_cves = []
     bb.utils.mkdirhier(os.path.dirname(cve_file))