diff options
| author | Niko Mauno <niko.mauno@vaisala.com> | 2025-05-26 09:29:26 +0000 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-07-04 07:50:17 -0700 |
| commit | de625a3c0f011ccba0fcf6d6722249063b83f384 (patch) | |
| tree | f7e44627a8703a5e05a66a10a4b2c977efab5c6a /scripts/lib/devtool/import.py | |
| parent | 12d3e960a4cf38ea59ecdae795ca3747b78b0704 (diff) | |
| download | poky-de625a3c0f011ccba0fcf6d6722249063b83f384.tar.gz | |
linux: cve-exclusions: Fix false negatives
Amend the generate-cve-exclusions.py checking logic in part of the code
responsible for iterating the "affected" defaultStatus part of the JSON
structure in order to mitigate occurrences of false negatives in the
generated output, as well as occurrences of wrong reason for negative
result in case where the reason is actually that the checked kernel
version is in backport fix scope.
In tandem we regenerate the content of cve-exclusion_6.12.inc using
https://github.com/CVEProject/cvelistV5.git repository main branch at
git hash b20d0043711588b6409ae3118bc0510ab888c316 to keep the content
in sync with the script.
(From OE-Core rev: 562f5def8b16ddf23d841ce01419879b7a3aeb2b)
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b1a5939535d67b9c0e6d8c2729cff9749a0ebaae)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'scripts/lib/devtool/import.py')
0 files changed, 0 insertions, 0 deletions