mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-07-25 19:27:14 +00:00
Code Issues Projects Releases Wiki Activity

cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS

Browse Source 
- Try to add convert and apply statuses for old CVEs
- Drop some obsolete ignores, while they are not relevant for current
  version

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Andrej Valek
2023-07-26 11:50:09 +02:00
committed by Khem Raj
parent 4c201ede93
commit 8af2f17a6f
33 changed files with 60 additions and 129 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-oe/recipes-core/emlog/emlog_git.bb
+3 -5
View File
@@ -25,11 +25,9 @@ do_install() {
RRECOMMENDS:${PN} += "kernel-module-emlog"
# The NVD database doesn't have a CPE for this product,
# the name of this product is exactly the same as github.com/emlog/emlog
# but it's not related in any way. The following CVEs are from that project
# so they can be safely ignored
CVE_CHECK_IGNORE += "\
CVE_STATUS_GROUPS += "CVE_STATUS_EMLOG"
CVE_STATUS_EMLOG[status] = "fixed-version: The name of this product is exactly the same as github.com/emlog/emlog. CVE can be safely ignored."
CVE_STATUS_EMLOG = " \
CVE-2019-16868 \
CVE-2019-17073 \
CVE-2021-44584 \