]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
cve-check: Fix false negative version issue
authorGeoffrey GIRY <geoffrey.giry@smile.fr>
Tue, 28 Mar 2023 10:23:49 +0000 (12:23 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 30 Mar 2023 11:30:32 +0000 (12:30 +0100)
commit7d00f6ec578084a0a0e5caf36241d53036d996c4
tree11c4f1c6a0af94ece835bfdb7b657857f12e960c
parent2415072c3800feb164dd4d1fa0b56bd141a5cbd8
cve-check: Fix false negative version issue

NVD DB store version and update in the same value, separated by '_'.
The proposed patch check if the version from NVD DB contains a "_",
ie 9.2.0_p1 is convert to 9.2.0p1 before version comparison.

[YOCTO #14127]

Reviewed-by: Yoann CONGAL <yoann.congal@smile.fr>
Signed-off-by: Geoffrey GIRY <geoffrey.giry@smile.fr>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
meta/classes/cve-check.bbclass
meta/lib/oe/cve_check.py
meta/lib/oeqa/selftest/cases/cve_check.py