From: Niko Mauno <realint@runbox.com>
To: openembedded-core@lists.openembedded.org
Subject: Re: [OE-core] [PATCH] libyaml: Amend CVE status as 'upstream-wontfix'
Date: Sat, 3 Aug 2024 13:55:48 +0300 [thread overview]
Message-ID: <1cb7a46f-a8b1-4063-b690-bef78b94da66@runbox.com> (raw)
In-Reply-To: <2427.1722608746946415660@lists.openembedded.org>
On 8/2/24 17:25, Guðni Már Gilbert wrote:
> I wonder if it would be good to backport this to Scarthgap. I'm getting
> the following warning for unpatched CVE on latest scarthgap:
> WARNING: libyaml-0.2.5-r0 do_cve_check: Found unpatched CVE
> (CVE-2024-35328), for more information check
> /home/builder/yocto/build/tmp/work/cortexa9t2hf-neon-tdx-linux-gnueabi/libyaml/0.2.5/temp/cve.log
> Would this patch silence it?
>
Thanks, I've submitted
https://lists.openembedded.org/g/openembedded-core/message/202933 which
should fix the issue if it gets incorporated.
-Niko
prev parent reply other threads:[~2024-08-03 10:56 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-08-01 10:17 [PATCH] libyaml: Amend CVE status as 'upstream-wontfix' niko.mauno
2024-08-02 14:25 ` Guðni Már Gilbert
2024-08-03 10:55 ` Niko Mauno [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1cb7a46f-a8b1-4063-b690-bef78b94da66@runbox.com \
--to=realint@runbox.com \
--cc=niko.mauno@iki.fi \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox