search

clearlinux / cve-check-tool

Original Automated CVE Checking Tool
GNU General Public License v2.0
204 stars 78 forks source link

version mapping support #57

Closed TudorCiochina closed 7 years ago

TudorCiochina commented 7 years ago

Overwrite the version from the initial package list using the version provided in the mapping file. [Mapping] name_in_NVD,version_in_NVD = name_from_input_list For example, [Mapping] linux_kernel,4.3 = own_linux_kernel_name The version of "own_linux_kernel_name" will become by 4.3. A possible use case is to bridge a custom package version with the one on upstream. The "local" custom package version might be 4.2-10, coresponding to 4.3 upstream. So, if we want to catch CVEs for 4.2-10, which actually is 4.3, we append 4.3 as shown above.

ikeydoherty commented 7 years ago

Looks beneficial to Yocto.