]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
cve-check: add support for Ignored CVEs
authorMarta Rybczynska <rybczynska@gmail.com>
Wed, 15 Jun 2022 13:20:11 +0000 (15:20 +0200)
committerSteve Sakoman <steve@sakoman.com>
Mon, 20 Jun 2022 16:47:01 +0000 (06:47 -1000)
commitd76957e4257a3bf934bdb94d65aa43267b8d9766
tree4756c349a9f3e4136269b9509256301e9febb7c4
parentb2d10487f80deb04a0893325a1ae79c8629a7655
cve-check: add support for Ignored CVEs

Ignored CVEs aren't patched, but do not apply in our configuration
for some reason. Up till now they were only partially supported
and reported as "Patched".

This patch adds separate reporting of Ignored CVEs. The variable
CVE_CHECK_REPORT_PATCHED now manages reporting of both patched
and ignored CVEs.

Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit c773102d4828fc4ddd1024f6115d577e23f1afe4)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/classes/cve-check.bbclass