mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-06-13 17:10:01 +00:00
Code Issues Projects Releases Wiki Activity

dev-manual: mention the new CVE patch metrics page

Browse Source 
(From yocto-docs rev: 42bfcb2d3a13e71264e5f29b07615c2da9866273)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Reviewed-by: Quentin Schulz <foss+yocto@0leil.net>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Michael Opdenacker
2022-06-06 17:58:29 +02:00
committed by Richard Purdie
parent 8b01f7811f
commit c91b04679f
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
documentation/dev-manual/common-tasks.rst
+9 -2
View File
@@ -11507,8 +11507,15 @@ known security vulnerabilities, as tracked by the public
`Common Vulnerabilities and Exposures (CVE) <https://en.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures>`__
database.
To know which packages are vulnerable to known security vulnerabilities,
add the following setting to your configuration::
The Yocto Project maintains a `list of known vulnerabilities
<https://autobuilder.yocto.io/pub/non-release/patchmetrics/>`__
for packages in Poky and OE-Core, tracking the evolution of the number of
unpatched CVEs and the status of patches. Such information is available for
the current development version and for each supported release.
To know which packages are vulnerable to known security vulnerabilities
in the specific image you are building, add the following setting to your
configuration::
INHERIT += "cve-check"