| Message ID | 20240531130128.1258909-3-marta.rybczynska@syslinbit.com |
|---|---|
| State | Under Review |
| Headers | show |
| Series | [RFC,1/3] cve-check: enrich annotation of CVEs | expand |
> On 31 May 2024, at 14:01, Marta Rybczynska via lists.openembedded.org <rybczynska=gmail.com@lists.openembedded.org> wrote: > > Update the CVE product name. The new Linux kernel CNA uses simply > "linux" as the product name. > > Signed-off-by: Marta Rybczynska <marta.rybczynska@syslinbit.com> > --- > meta/recipes-kernel/linux/linux-yocto.inc | 3 +++ > 1 file changed, 3 insertions(+) > > diff --git a/meta/recipes-kernel/linux/linux-yocto.inc b/meta/recipes-kernel/linux/linux-yocto.inc > index 0132fcffb3..f469bae8bd 100644 > --- a/meta/recipes-kernel/linux/linux-yocto.inc > +++ b/meta/recipes-kernel/linux/linux-yocto.inc > @@ -9,6 +9,9 @@ UPSTREAM_CHECK_GITTAGREGEX = "(?P<pver>\d+\.\d+(\.\d+)*)" > > RECIPE_NO_UPDATE_REASON = "Recipe is updated through a separate process" > > +# Kernel CNA uses this in their CVE entries > +CVE_PRODUCT = "linux:linux linux:linux_kernel" The comment doesn’t explain what one “this” is, but as the default is set in kernel.bbclass the change should be there, so that all kernels use the correct names and not just linux-yocto. Ross
diff --git a/meta/recipes-kernel/linux/linux-yocto.inc b/meta/recipes-kernel/linux/linux-yocto.inc index 0132fcffb3..f469bae8bd 100644 --- a/meta/recipes-kernel/linux/linux-yocto.inc +++ b/meta/recipes-kernel/linux/linux-yocto.inc @@ -9,6 +9,9 @@ UPSTREAM_CHECK_GITTAGREGEX = "(?P<pver>\d+\.\d+(\.\d+)*)" RECIPE_NO_UPDATE_REASON = "Recipe is updated through a separate process" +# Kernel CNA uses this in their CVE entries +CVE_PRODUCT = "linux:linux linux:linux_kernel" + # Skip processing of this recipe if it is not explicitly specified as the # PREFERRED_PROVIDER for virtual/kernel. This avoids network access required # by the use of AUTOREV SRCREVs, which are the default for this recipe.
Update the CVE product name. The new Linux kernel CNA uses simply "linux" as the product name. Signed-off-by: Marta Rybczynska <marta.rybczynska@syslinbit.com> --- meta/recipes-kernel/linux/linux-yocto.inc | 3 +++ 1 file changed, 3 insertions(+)