]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
linux/cve-exclusion: Execute the script after changing to the new data source
authorDaniel Turull <daniel.turull@ericsson.com>
Fri, 11 Apr 2025 06:40:15 +0000 (08:40 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 17 Apr 2025 09:22:52 +0000 (10:22 +0100)
commit8a7af09febc28477094de0999ab6321d910811b2
treed5961064e8d8d72df382614db60b96b193386366
parent12612e8680798bdce39fbb79885e661596dbd53c
linux/cve-exclusion: Execute the script after changing to the new data source

Execute new script generate-cve-exclusions.py
./generate-cve-exclusions.py ~/cvelistV5/ 6.12.19 > cve-exclusion_6.12.inc

After using the database from CVEproject, some old
CVEs did not have correct metadata, therefore moving missing ones
from old cve-exclusions_6.12.inc into cve-exclusion.inc

Comparing output from cve_check before and after, two CVEs are removed:
CVE-2023-52904 and CVE-2024-38381

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-kernel/linux/cve-exclusion.inc
meta/recipes-kernel/linux/cve-exclusion_6.12.inc