mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-02-25 10:59:41 +01:00
Code Issues Packages Projects Releases Wiki Activity

ref-manual: add mention of vendor filtering to CVE_PRODUCT

Browse Source 
Mention the vendor filtering functionality - prompted by OE-Core
revision 45d1a0bea0c628f84a00d641a4d323491988106f.

(From yocto-docs rev: 13ff5a49f14a26772b4775d9ecd08627e6becd4d)

Signed-off-by: Paul Eggleton <paul.eggleton@microsoft.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Paul Eggleton
2022-04-21 18:40:37 -07:00
committed by Richard Purdie
parent 0dd9a182ac
commit 71fafac324
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
documentation/ref-manual/variables.rst
View File

@@ -1485,6 +1485,13 @@ system and gives an overview of their function and contents.
CVE_PRODUCT = "oracle_berkeley_db berkeley_db"
Sometimes the product name is not specific enough, for example
"tar" has been matching CVEs for the GNU ``tar`` package and also
the ``node-tar`` node.js extension. To avoid this problem, use the
vendor name as a prefix. The syntax for this is::
CVE_PRODUCT = "vendor:package"
:term:`CVSDIR`
The directory in which files checked out under the CVS system are
stored.