From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga09.intel.com (mga09.intel.com [134.134.136.24]) by mail.openembedded.org (Postfix) with ESMTP id E86757737A for ; Wed, 24 Feb 2016 23:31:24 +0000 (UTC) Received: from orsmga001.jf.intel.com ([10.7.209.18]) by orsmga102.jf.intel.com with ESMTP; 24 Feb 2016 15:31:25 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.22,495,1449561600"; d="scan'208";a="894058222" Received: from yctb01.ostc.intel.com (HELO yctb01.otcr.intel.com) ([10.54.69.55]) by orsmga001.jf.intel.com with ESMTP; 24 Feb 2016 15:31:25 -0800 From: mariano.lopez@linux.intel.com To: openembedded-core@lists.openembedded.org Date: Wed, 24 Feb 2016 15:27:05 +0000 Message-Id: X-Mailer: git-send-email 2.6.2 Subject: [PATCH 0/3] Add initial capability to check CVEs for recipes X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Feb 2016 23:31:25 -0000 From: Mariano Lopez This series add the cve-check-tool recipe, a tool used to identify potentially vulnerable software through version matching. It will check if a vulnerability has been addressed by a patch. Also add the new cve-check class that will add a task for all recipes to check for CVEs using cve-check-tool. This tool can be used by recipe, image (will generate an image report in deploy dir), and with "world" and "universe" To run it just inherit the class and enter: bitbake -c cve_check The following changes since commit 23056103c949b498c23b47579e8dd57ce78e6ed9: uclibc: Do not use immediate expansion operator (2016-02-22 20:42:48 +0000) are available in the git repository at: git://git.yoctoproject.org/poky-contrib mariano/bug7515 http://git.yoctoproject.org/cgit.cgi/poky-contrib/log/?h=mariano/bug7515 Mariano Lopez (3): cve-check-tool: Add recipe cve-check-tool patch to allow select dir for the db cve-check.bbclass: Add class meta/classes/cve-check.bbclass | 229 +++++++++++++++++++++ .../change_logic_cve_get_file_parent.patch | 45 ++++ .../cve-check-tool/cve-check-tool_5.6.bb | 61 ++++++ 3 files changed, 335 insertions(+) create mode 100644 meta/classes/cve-check.bbclass create mode 100644 meta/recipes-devtools/cve-check-tool/cve-check-tool/change_logic_cve_get_file_parent.patch create mode 100644 meta/recipes-devtools/cve-check-tool/cve-check-tool_5.6.bb -- 2.6.2