mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-09-19 09:49:33 +02:00
Code Issues Packages Projects Releases Wiki Activity

ref-manual: add mention of vendor filtering to CVE_PRODUCT

Browse Source 
Mention the vendor filtering functionality - prompted by OE-Core
revision 45d1a0bea0c628f84a00d641a4d323491988106f.

(From yocto-docs rev: 13ff5a49f14a26772b4775d9ecd08627e6becd4d)

Signed-off-by: Paul Eggleton <paul.eggleton@microsoft.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Paul Eggleton
2022-04-21 18:40:37 -07:00
committed by Richard Purdie
parent 8da3055567
commit b3f040b4a5
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
documentation/ref-manual/variables.rst
View File

@@ -1485,6 +1485,13 @@ system and gives an overview of their function and contents.
CVE_PRODUCT = "oracle_berkeley_db berkeley_db" CVE_PRODUCT = "oracle_berkeley_db berkeley_db"
Sometimes the product name is not specific enough, for example
"tar" has been matching CVEs for the GNU ``tar`` package and also
the ``node-tar`` node.js extension. To avoid this problem, use the
vendor name as a prefix. The syntax for this is::
CVE_PRODUCT = "vendor:package"
:term:`CVSDIR` :term:`CVSDIR`
The directory in which files checked out under the CVS system are The directory in which files checked out under the CVS system are
stored. stored.