Re: [OE-core] [PATCH] cve-check: Log if CVE_STATUS set but not reported for component

["Simone Weiß" <simone.weiss@posteo.net>]

On Sat, 2024-02-24 at 14:28 +0000, Peter Marko via lists.openembedded.org
wrote:
> Hello,
> 
> This change looks like the right way forward, but it will need two
> things first:
> * dissolve cve-extra-exclusions.inc into recipes, as every exclusion in
> that file will generate a warning in all components except the one for
> which the exclusion actually is meant
> * create a (per-recipe) variable to disable it, especially for kernels
> where we have auto-generated exclusion lists which do not match NVD DB
> state
Hi,
this is disabled per default, so I think those points are not to pressing.

Cheers,
Simone
> 
> Best Regards,
>   Peter
> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#196131):
> https://lists.openembedded.org/g/openembedded-core/message/196131
> Mute This Topic: https://lists.openembedded.org/mt/104536878/8052774
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe:
> https://lists.openembedded.org/g/openembedded-core/unsub [simone.p.weiss@posteo.com
> ]
> -=-=-=-=-=-=-=-=-=-=-=-
>