Re: [OE-core] [PATCH] curl: extend CVE_PRODUCT

2018-10-29 Thread Richard Purdie
On Mon, 2018-10-29 at 15:46 +, akuster808 wrote: > On 10/29/18 3:13 PM, grygorii tertychnyi via Openembedded-core wrote: > > There are both "curl" and "libcurl" CPEs in NVD. > > All "curl" CVEs are now missed in the reports. > > > > Hence, switch "CVE_PRODUCT" to a space separated list. > >

Re: [OE-core] [PATCH] curl: extend CVE_PRODUCT

2018-10-29 Thread akuster808
On 10/29/18 3:13 PM, grygorii tertychnyi via Openembedded-core wrote: > There are both "curl" and "libcurl" CPEs in NVD. > All "curl" CVEs are now missed in the reports. > > Hence, switch "CVE_PRODUCT" to a space separated list. > It is useful for recipes generating several packages, > that have

[OE-core] [PATCH] curl: extend CVE_PRODUCT

2018-10-29 Thread grygorii tertychnyi via Openembedded-core
There are both "curl" and "libcurl" CPEs in NVD. All "curl" CVEs are now missed in the reports. Hence, switch "CVE_PRODUCT" to a space separated list. It is useful for recipes generating several packages, that have different product names in NVD. Signed-off-by: grygorii tertychnyi ---