cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS

- Try to add convert and apply statuses for old CVEs
- Drop some obsolete ignores, while they are not relevant for current
  version

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Andrej Valek
2023-07-26 11:50:09 +02:00
committed by Khem Raj
parent 4c201ede93
commit 8af2f17a6f
33 changed files with 60 additions and 129 deletions
@@ -50,11 +50,8 @@ SRC_URI:append:toolchain-clang = "\
S = "${WORKDIR}/git"
CVE_CHECK_IGNORE += "\
CVE-2014-8180 \
CVE-2017-18381 \
CVE-2017-2665 \
"
CVE_STATUS[CVE-2014-8180] = "not-applicable-config: Not affecting our configuration so it can be safely ignored."
CVE_STATUS[CVE-2017-2665] = "not-applicable-config: Not affecting our configuration so it can be safely ignored."
COMPATIBLE_HOST ?= '(x86_64|i.86|powerpc64|arm|aarch64).*-linux'