From: Luca Ceresoli <luca.ceresoli@bootlin.com>
To: "Matsunaga-Shinji" <shin.matsunaga@fujitsu.com>
Cc: rybczynska@gmail.com, richard.purdie@linuxfoundation.org,
openembedded-core@lists.openembedded.org,
Shunsuke Tokumoto <s-tokumoto@fujitsu.com>
Subject: Re: [OE-core] [PATCH v2] cve-check: Classify patched CVEs into 3 statuses
Date: Thu, 26 Oct 2023 09:28:39 +0200 [thread overview]
Message-ID: <20231026092839.7069e7e8@booty> (raw)
In-Reply-To: <20231025051344.24088-1-shin.matsunaga@fujitsu.com>
Hello Matsunaga-Shinji,
On Wed, 25 Oct 2023 14:13:44 +0900
"Matsunaga-Shinji" <shin.matsunaga@fujitsu.com> wrote:
> CVEs that are currently considered "Patched" are classified into the following 3 statuses:
> 1. "Patched" - means that a patch file that fixed the vulnerability has been applied
> 2. "Not affected" - means that the package version (PV) is not affected by the vulnerability
> 3. "Undecidable" - means that versions cannot be compared to determine if they are affected by the vulnerability
>
> Signed-off-by: Shinji Matsunaga <shin.matsunaga@fujitsu.com>
> Signed-off-by: Shunsuke Tokumoto <s-tokumoto@fujitsu.com>
This patch triggers a selftest failure:
AssertionError: 'Not affected' != 'Patched'
- Not affected
+ Patched
https://autobuilder.yoctoproject.org/typhoon/#/builders/127/builds/2329/steps/15/logs/stdio
https://autobuilder.yoctoproject.org/typhoon/#/builders/80/builds/5912/steps/14/logs/stdio
https://autobuilder.yoctoproject.org/typhoon/#/builders/79/builds/5962/steps/14/logs/stdio
Luca
--
Luca Ceresoli, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
prev parent reply other threads:[~2023-10-26 7:28 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <20230922083400.3157-1-shin.matsunaga@fujitsu.com>
2023-10-25 5:13 ` [PATCH v2] cve-check: Classify patched CVEs into 3 statuses Shinji Matsunaga
2023-10-25 6:44 ` [OE-core] " Andrej Valek
2023-10-25 9:33 ` Marta Rybczynska
2023-10-25 10:18 ` Andrej Valek
2023-10-25 12:43 ` Marta Rybczynska
2023-10-25 13:09 ` Marko, Peter
2023-10-25 13:31 ` Marta Rybczynska
2023-10-26 7:28 ` Luca Ceresoli [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20231026092839.7069e7e8@booty \
--to=luca.ceresoli@bootlin.com \
--cc=openembedded-core@lists.openembedded.org \
--cc=richard.purdie@linuxfoundation.org \
--cc=rybczynska@gmail.com \
--cc=s-tokumoto@fujitsu.com \
--cc=shin.matsunaga@fujitsu.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.