]> code.ossystems Code Review - openembedded-core.git/commitdiff
cve-check: include epoch in product version output
authorRalph Siemsen <ralph.siemsen@linaro.org>
Tue, 2 Jun 2020 18:21:13 +0000 (14:21 -0400)
committerSteve Sakoman <steve@sakoman.com>
Tue, 9 Jun 2020 15:39:30 +0000 (05:39 -1000)
In the generated cve.log files, include the epoch in the product
version. This better matches how versions are displayed elsewhere,
in particular the bb.warn("Found unpatched CVE...") that appears
on the terminal when CVEs are found.

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e1c3c0b6e5b01304e2127f5058986697e82adf93)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/classes/cve-check.bbclass

index 556ac6e67f8555609c8356ebe62414edf6f9d4cb..514897e8b873e9e7d7c460aeab43b557aeb8e2f6 100644 (file)
@@ -301,7 +301,7 @@ def cve_write_data(d, patched, unpatched, whitelisted, cve_data):
 
     for cve in sorted(cve_data):
         write_string += "PACKAGE NAME: %s\n" % d.getVar("PN")
-        write_string += "PACKAGE VERSION: %s\n" % d.getVar("PV")
+        write_string += "PACKAGE VERSION: %s%s\n" % (d.getVar("EXTENDPE"), d.getVar("PV"))
         write_string += "CVE: %s\n" % cve
         if cve in whitelisted:
             write_string += "CVE STATUS: Whitelisted\n"