mbox series

[meta-oe,0/3] add missing CVE_PRODUCT

Message ID 20230824140747.45594-1-emkan@prevas.dk
Headers show
Series add missing CVE_PRODUCT | expand

Message

Emil Kronborg Andersen Aug. 24, 2023, 2:07 p.m. UTC 
Some recipes does not have 'CVE_PRODUCT' set, and will thus pass a check
against the NIST database with 0 CVEs, even though there could be
several.

Emil Kronborg Andersen (3):
  libopus: add CVE_PRODUCT
  lcms: add CVE_PRODUCT
  snappy: add CVE_PRODUCT

 meta-oe/recipes-extended/snappy/snappy_1.1.9.bb   | 2 ++
 meta-oe/recipes-multimedia/libopus/libopus_1.4.bb | 2 ++
 meta-oe/recipes-support/lcms/lcms_2.15.bb         | 2 ++
 3 files changed, 6 insertions(+)

Comments

Luca Ceresoli Aug. 25, 2023, 8:24 a.m. UTC | #1 
Hello Emil,

On Thu, 24 Aug 2023 16:07:44 +0200
"Emil Kronborg Andersen via lists.openembedded.org"
<emkan=prevas.dk@lists.openembedded.org> wrote:

> Some recipes does not have 'CVE_PRODUCT' set, and will thus pass a check
> against the NIST database with 0 CVEs, even though there could be
> several.
> 
> Emil Kronborg Andersen (3):
>   libopus: add CVE_PRODUCT
>   lcms: add CVE_PRODUCT
>   snappy: add CVE_PRODUCT
> 
>  meta-oe/recipes-extended/snappy/snappy_1.1.9.bb   | 2 ++
>  meta-oe/recipes-multimedia/libopus/libopus_1.4.bb | 2 ++
>  meta-oe/recipes-support/lcms/lcms_2.15.bb         | 2 ++

These patches should be sent to the meta-oe mailing list.

Best regards,
Luca
Emil Kronborg Andersen Aug. 25, 2023, 9:05 a.m. UTC | #2 
Hi Luca,

Sorry about that. I sent them to the meta-oe mailing list now.

Best regards,
Emil