mbox series

[0/4] Improve CVE check and patching documentation

Message ID 20221026131207.3655961-1-mikko.rapeli@linaro.org
Headers show
Series Improve CVE check and patching documentation | expand

Message

Mikko Rapeli Oct. 26, 2022, 1:12 p.m. UTC
From: Mikko Rapeli <mikko.rapeli@linaro.org>

I think detecting and fixing CVE security issues in yocto based distros
is quite important so improve the documentation around it. I've been
using cve-check.bbclass for a long time and these details hopefully
make it easier for others to start using it as well.

Mikko Rapeli (4):
  ref-manual/variables.rst: add documentation for CVE_VERSION
  classes.rst: improve documentation for cve-check.bbclass
  common-tasks.rst: add regular updates and CVE scans to security best
    practices
  common-tasks.rst: refactor and improve "Checking for Vulnerabilities"
    section

 documentation/dev-manual/common-tasks.rst | 183 +++++++++++++++++-----
 documentation/ref-manual/classes.rst      |  52 +++++-
 documentation/ref-manual/variables.rst    |  12 ++
 3 files changed, 204 insertions(+), 43 deletions(-)

Comments

Michael Opdenacker Oct. 26, 2022, 1:47 p.m. UTC | #1
Hi Mikko

On 10/26/22 15:12, Mikko Rapeli wrote:
> From: Mikko Rapeli <mikko.rapeli@linaro.org>
>
> I think detecting and fixing CVE security issues in yocto based distros
> is quite important so improve the documentation around it. I've been
> using cve-check.bbclass for a long time and these details hopefully
> make it easier for others to start using it as well.
>
> Mikko Rapeli (4):
>    ref-manual/variables.rst: add documentation for CVE_VERSION
>    classes.rst: improve documentation for cve-check.bbclass
>    common-tasks.rst: add regular updates and CVE scans to security best
>      practices
>    common-tasks.rst: refactor and improve "Checking for Vulnerabilities"
>      section
>
>   documentation/dev-manual/common-tasks.rst | 183 +++++++++++++++++-----
>   documentation/ref-manual/classes.rst      |  52 +++++-
>   documentation/ref-manual/variables.rst    |  12 ++
>   3 files changed, 204 insertions(+), 43 deletions(-)


Many thanks for all these. They are much appreciated, and I also found 
that the CVE management document wasn't sufficient.
My reviews are following (when there is something to say).
Cheers
Michael.