From 52c7e49e2c8922f8d5252f5ec0c81564da7a0353 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Fri, 6 Dec 2024 00:41:39 +0100 Subject: [PATCH] builder: set CVE_PRODUCT Builder is a common word and there are many other builder components which makes us to ignore CVEs for all of them. There is already 1 ignored and currently 3 new ones. Instead, set product to yocto to filter them. (From OE-Core rev: fd4ec5a5318b36af0a9a0a097a5b1f1de44a8edf) (From OE-Core rev: 18773170492fc01ce7123ba0fac88e58750a3b93) Signed-off-by: Peter Marko Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman --- meta/recipes-graphics/builder/builder_0.1.bb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/meta/recipes-graphics/builder/builder_0.1.bb b/meta/recipes-graphics/builder/builder_0.1.bb index 7719b783c2..39abaf31ce 100644 --- a/meta/recipes-graphics/builder/builder_0.1.bb +++ b/meta/recipes-graphics/builder/builder_0.1.bb @@ -29,4 +29,5 @@ do_install () { chown builder.builder ${D}${sysconfdir}/mini_x/session.d/builder_session.sh } -CVE_STATUS[CVE-2008-4178] = "cpe-incorrect: This CVE is for an unrelated builder" +# do not report CVEs for other builder apps +CVE_PRODUCT = "yoctoproject:builder"