]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
linux/generate-cve-exclusions: use data from CVEProject
authorDaniel Turull <daniel.turull@ericsson.com>
Thu, 10 Apr 2025 09:48:35 +0000 (11:48 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 23 Apr 2025 18:49:21 +0000 (19:49 +0100)
commit96ef76d88851a5a397d9fc04e37baa285d9f4074
treecf9546dc6007f8c4739e71977d367d0c9c4aef91
parent6ec2c52b938302b894f119f701ffcf0a847eee85
linux/generate-cve-exclusions: use data from CVEProject

The old script was relying on linuxkernelcves.com that was archived in
May 2024 when kernel.org became a CNA.

The new script reads CVE json files from the datadir that can be either
from the official kernel.org CNA [1] or CVEProject [2]

[1] https://git.kernel.org/pub/scm/linux/security/vulns.git
[2] https://github.com/CVEProject/cvelistV5

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-kernel/linux/generate-cve-exclusions.py