Browse Source

vulnerabilities: update nvdcve file name

The filename is outdated as its version was already bumped and there are
also different files for different feed choices.
Use glob to match any available file.

Also the directory changed to CVE_CHECK2 meanwhile, so Update it, too.

(From yocto-docs rev: a2f18cb23183401d9d8e2fd4499d164ef8d86e44)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Peter Marko 1 month ago
parent
commit
612ac91bb0
1 changed files with 1 additions and 1 deletions
  1. 1 1
      documentation/dev-manual/vulnerabilities.rst

+ 1 - 1
documentation/dev-manual/vulnerabilities.rst

@@ -318,7 +318,7 @@ products defined in :term:`CVE_PRODUCT`. Then, for each found CVE:
 The CVE database is stored in :term:`DL_DIR` and can be inspected using
 ``sqlite3`` command as follows::
 
-   sqlite3 downloads/CVE_CHECK/nvdcve_1.1.db .dump | grep CVE-2021-37462
+   sqlite3 downloads/CVE_CHECK2/nvd*.db .dump | grep CVE-2021-37462
 
 When analyzing CVEs, it is recommended to: