mirror of
https://git.yoctoproject.org/poky
synced 2026-04-21 03:32:12 +02:00
cve-check: restore CVE_CHECK_SHOW_WARNINGS functionality
Commit 05ef4f2a7b225c8d230eaca8d333ffb921729d79 removed this functionality by accident. It was implemented in text exporter, while it should have been a global feature independent on exporter type to avoid such accidental deletion. (From OE-Core rev: 2996b11596afca288a6b7f409a5287063d331f3b) Signed-off-by: Peter Marko <peter.marko@siemens.com> Cc: Marta Rybczynska <marta.rybczynska@ygreky.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
e48539a2f8
commit
275aec49b6
@@ -422,6 +422,11 @@ def check_cves(d, cve_data):
|
||||
if not cves_in_recipe:
|
||||
bb.note("No CVE records for products in recipe %s" % (pn))
|
||||
|
||||
if d.getVar("CVE_CHECK_SHOW_WARNINGS") == "1":
|
||||
unpatched_cves = [cve for cve in cve_data if cve_data[cve]["abbrev-status"] == "Unpatched"]
|
||||
if unpatched_cves:
|
||||
bb.warn("Found unpatched CVE (%s)" % " ".join(unpatched_cves))
|
||||
|
||||
return (cve_data, cves_status)
|
||||
|
||||
def get_cve_info(d, cve_data):
|
||||
|
||||
Reference in New Issue
Block a user