| Summary: | Add "CVE:" tags to patches already in OE-core | ||
|---|---|---|---|
| Product: | [Build System, Metadata & Runtime] OE-Core | Reporter: | Mariano Lopez <mariano.lopez> |
| Component: | core | Assignee: | Mariano Lopez <mariano.lopez> |
| Status: | VERIFIED FIXED | QA Contact: | Alexandru Roman <alexandru.costinx.roman> |
| Severity: | major | ||
| Priority: | Medium+ | CC: | bogdanx.a.voiculescu, meta.mr.watcher, meta.watcher, ross.burton |
| Version: | 2.0 | ||
| Target Milestone: | 2.1 M2 | ||
| Hardware: | All | ||
| OS: | Multiple | ||
| Whiteboard: | |||
| OS type for building Yocto: | --- | Type of Regression: | --- |
| Verified: | Documentation change: | No (bug/feature does not impact docs) | |
|
Description
Mariano Lopez
2016-01-08 15:27:44 UTC
My awesome tooling (github:rossburton/ross-tools, patchreview.py) is being updated right now and currently says this for oe-core: Patches missing CVE: 35 (2%) That's an estimate as it just looks for patches that have a CVE identifier in their content or filename, but that could be worse! Thanks Ross for the tool. I hack a little to try to find more CVE patches, but I couldn't find more. Sent patch to the list with these 35 recipes. http://lists.openembedded.org/pipermail/openembedded-core/2016-January/115127.html This has been solved with commit e5c011b041dc27cdfeb840b6933dcb9752886bb9: http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=e5c011b041dc27cdfeb840b6933dcb9752886bb9 Verified on master. |