diff options
Diffstat (limited to 'documentation/ref-manual/classes.rst')
-rw-r--r-- | documentation/ref-manual/classes.rst | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/documentation/ref-manual/classes.rst b/documentation/ref-manual/classes.rst index 4577baba3e..a7819d5b60 100644 --- a/documentation/ref-manual/classes.rst +++ b/documentation/ref-manual/classes.rst | |||
@@ -517,10 +517,10 @@ The ``Patched`` state of a CVE issue is detected from patch files with the forma | |||
517 | ``CVE-ID.patch``, e.g. ``CVE-2019-20633.patch``, in the :term:`SRC_URI` and using | 517 | ``CVE-ID.patch``, e.g. ``CVE-2019-20633.patch``, in the :term:`SRC_URI` and using |
518 | CVE metadata of format ``CVE: CVE-ID`` in the commit message of the patch file. | 518 | CVE metadata of format ``CVE: CVE-ID`` in the commit message of the patch file. |
519 | 519 | ||
520 | If the recipe lists the ``CVE-ID`` in :term:`CVE_CHECK_IGNORE` variable, then the CVE state is reported | 520 | If the recipe adds ``CVE-ID`` as flag of the :term:`CVE_STATUS` variable with status |
521 | as ``Ignored``. Multiple CVEs can be listed separated by spaces. Example:: | 521 | mapped to ``Ignored``, then the CVE state is reported as ``Ignored``:: |
522 | 522 | ||
523 | CVE_CHECK_IGNORE += "CVE-2020-29509 CVE-2020-29511" | 523 | CVE_STATUS[CVE-2020-15523] = "not-applicable-platform: Issue only applies on Windows" |
524 | 524 | ||
525 | If CVE check reports that a recipe contains false positives or false negatives, these may be | 525 | If CVE check reports that a recipe contains false positives or false negatives, these may be |
526 | fixed in recipes by adjusting the CVE product name using :term:`CVE_PRODUCT` and :term:`CVE_VERSION` variables. | 526 | fixed in recipes by adjusting the CVE product name using :term:`CVE_PRODUCT` and :term:`CVE_VERSION` variables. |