mbox series

[v2,0/4] Improve CVE check and patching documentation

Message ID 20221026160713.2068570-1-michael.opdenacker@bootlin.com
Headers show
Series Improve CVE check and patching documentation | expand

Message

Michael Opdenacker Oct. 26, 2022, 4:07 p.m. UTC 
From: Michael Opdenacker <michael.opdenacker@bootlin.com>

From: Mikko Rapeli <mikko.rapeli@linaro.org>

I think detecting and fixing CVE security issues in yocto based distros
is quite important so improve the documentation around it. I've been
using cve-check.bbclass for a long time and these details hopefully
make it easier for others to start using it as well.

Changes in V2:
- Misc wording fixes by Michael Opdenacker

Mikko Rapeli (4):
  ref-manual: variables.rst: add documentation for CVE_VERSION
  ref-manual: classes.rst: improve documentation for cve-check.bbclass
  dev-manual: common-tasks.rst: add regular updates and CVE scans to
    security best practices
  dev-manual: common-tasks.rst: refactor and improve "Checking for
    Vulnerabilities" section

 documentation/dev-manual/common-tasks.rst | 183 +++++++++++++++++-----
 documentation/ref-manual/classes.rst      |  52 +++++-
 documentation/ref-manual/variables.rst    |  12 ++
 3 files changed, 204 insertions(+), 43 deletions(-)