From: Luca Ceresoli <luca.ceresoli@bootlin.com>
To: "Matsunaga-Shinji" <shin.matsunaga@fujitsu.com>
Cc: rybczynska@gmail.com, richard.purdie@linuxfoundation.org,
openembedded-core@lists.openembedded.org,
Shunsuke Tokumoto <s-tokumoto@fujitsu.com>
Subject: Re: [OE-core] [PATCH v2] cve-check: Classify patched CVEs into 3 statuses
Date: Thu, 26 Oct 2023 09:28:39 +0200 [thread overview]
Message-ID: <20231026092839.7069e7e8@booty> (raw)
In-Reply-To: <20231025051344.24088-1-shin.matsunaga@fujitsu.com>
Hello Matsunaga-Shinji,
On Wed, 25 Oct 2023 14:13:44 +0900
"Matsunaga-Shinji" <shin.matsunaga@fujitsu.com> wrote:
> CVEs that are currently considered "Patched" are classified into the following 3 statuses:
> 1. "Patched" - means that a patch file that fixed the vulnerability has been applied
> 2. "Not affected" - means that the package version (PV) is not affected by the vulnerability
> 3. "Undecidable" - means that versions cannot be compared to determine if they are affected by the vulnerability
>
> Signed-off-by: Shinji Matsunaga <shin.matsunaga@fujitsu.com>
> Signed-off-by: Shunsuke Tokumoto <s-tokumoto@fujitsu.com>
This patch triggers a selftest failure:
AssertionError: 'Not affected' != 'Patched'
- Not affected
+ Patched
https://autobuilder.yoctoproject.org/typhoon/#/builders/127/builds/2329/steps/15/logs/stdio
https://autobuilder.yoctoproject.org/typhoon/#/builders/80/builds/5912/steps/14/logs/stdio
https://autobuilder.yoctoproject.org/typhoon/#/builders/79/builds/5962/steps/14/logs/stdio
Luca
--
Luca Ceresoli, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
prev parent reply other threads:[~2023-10-26 7:28 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <20230922083400.3157-1-shin.matsunaga@fujitsu.com>
2023-10-25 5:13 ` [PATCH v2] cve-check: Classify patched CVEs into 3 statuses Shinji Matsunaga
2023-10-25 6:44 ` [OE-core] " Andrej Valek
2023-10-25 9:33 ` Marta Rybczynska
2023-10-25 10:18 ` Andrej Valek
2023-10-25 12:43 ` Marta Rybczynska
2023-10-25 13:09 ` Marko, Peter
2023-10-25 13:31 ` Marta Rybczynska
2023-10-26 7:28 ` Luca Ceresoli [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20231026092839.7069e7e8@booty \
--to=luca.ceresoli@bootlin.com \
--cc=openembedded-core@lists.openembedded.org \
--cc=richard.purdie@linuxfoundation.org \
--cc=rybczynska@gmail.com \
--cc=s-tokumoto@fujitsu.com \
--cc=shin.matsunaga@fujitsu.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox