summaryrefslogtreecommitdiffstats
path: root/documentation/ref-manual/classes.rst
diff options
context:
space:
mode:
Diffstat (limited to 'documentation/ref-manual/classes.rst')
-rw-r--r--documentation/ref-manual/classes.rst6
1 files changed, 3 insertions, 3 deletions
diff --git a/documentation/ref-manual/classes.rst b/documentation/ref-manual/classes.rst
index 4577baba3e..a7819d5b60 100644
--- a/documentation/ref-manual/classes.rst
+++ b/documentation/ref-manual/classes.rst
@@ -517,10 +517,10 @@ The ``Patched`` state of a CVE issue is detected from patch files with the forma
517``CVE-ID.patch``, e.g. ``CVE-2019-20633.patch``, in the :term:`SRC_URI` and using 517``CVE-ID.patch``, e.g. ``CVE-2019-20633.patch``, in the :term:`SRC_URI` and using
518CVE metadata of format ``CVE: CVE-ID`` in the commit message of the patch file. 518CVE metadata of format ``CVE: CVE-ID`` in the commit message of the patch file.
519 519
520If the recipe lists the ``CVE-ID`` in :term:`CVE_CHECK_IGNORE` variable, then the CVE state is reported 520If the recipe adds ``CVE-ID`` as flag of the :term:`CVE_STATUS` variable with status
521as ``Ignored``. Multiple CVEs can be listed separated by spaces. Example:: 521mapped to ``Ignored``, then the CVE state is reported as ``Ignored``::
522 522
523 CVE_CHECK_IGNORE += "CVE-2020-29509 CVE-2020-29511" 523 CVE_STATUS[CVE-2020-15523] = "not-applicable-platform: Issue only applies on Windows"
524 524
525If CVE check reports that a recipe contains false positives or false negatives, these may be 525If CVE check reports that a recipe contains false positives or false negatives, these may be
526fixed in recipes by adjusting the CVE product name using :term:`CVE_PRODUCT` and :term:`CVE_VERSION` variables. 526fixed in recipes by adjusting the CVE product name using :term:`CVE_PRODUCT` and :term:`CVE_VERSION` variables.