fixes #7697 - enable searching by CVE

[stbenjam]

No description provided.

[daviddavis]

I'd probably check the id, eg:

def find_cve
  @cve = ErratumCve.find_by_id(params[:cve])
  fail HttpErrors::NotFound, _("Could not find erratum CVE with id '%s'") % params[:cve] unless @cve
end

[stbenjam]

Yea, I had that originally, I wasn't sure if it was worth the double SQL query (and cve_id isn't unique), but will add it

[daviddavis]

ACK pending small comment

[stbenjam]

@daviddavis Can you just sanity check this? I think I need to do this to verify it, as an errata can have many CVE's, and cve_id is not unique.

def find_cve
   @cve = params[:cve] if ErratumCve.where(:cve_id => params[:cve]).any?
   fail HttpErrors::NotFound, _("Could not find erratum with CVE '%s'") % params[:cve] unless @cve
end

[daviddavis]

Sorry, I didn't realize the cve id wasn't a primary key. In that case I might keep it the way it was before. My bad.

I would probably just remove the find_cve method though. Just use params[:cve] instead of @cve.

[jlsherrill]

[test]

[daviddavis]

APJ

[stbenjam]

[test]

[ehelms]

[test]