mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-07-16 04:17:25 +00:00
cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS
- Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
@@ -36,7 +36,9 @@ SRC_URI:append:class-target = " \
|
||||
S = "${WORKDIR}/php-${PV}"
|
||||
SRC_URI[sha256sum] = "995ed4009c7917c962d31837a1a3658f36d4af4f357b673c97ffdbe6403f8517"
|
||||
|
||||
CVE_CHECK_IGNORE += "\
|
||||
CVE_STATUS_GROUPS += "CVE_STATUS_PHP"
|
||||
CVE_STATUS_PHP[status] = "fixed-version: The name of this product is exactly the same as github.com/emlog/emlog. CVE can be safely ignored."
|
||||
CVE_STATUS_PHP = " \
|
||||
CVE-2007-2728 \
|
||||
CVE-2007-3205 \
|
||||
CVE-2007-4596 \
|
||||
|
||||
Reference in New Issue
Block a user