mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-02-20 08:29:42 +01:00
Code Issues Packages Projects Releases Wiki Activity

ref-manual: classes: cve_check: add note about remote patches

Browse Source 
Document the change in behaviour in 5.0.

(From yocto-docs rev: f7a223d4e78bee67107fa47e147208f57a2d9521)

Signed-off-by: Paul Eggleton <paul.eggleton@microsoft.com>
Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Paul Eggleton
2024-04-14 13:43:12 -07:00
committed by Richard Purdie
parent 0ff0de3c65
commit 7d41877ce9
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
documentation/ref-manual/classes.rst
View File

@@ -564,6 +564,13 @@ The ``Patched`` state of a CVE issue is detected from patch files with the forma
``CVE-ID.patch``, e.g. ``CVE-2019-20633.patch``, in the :term:`SRC_URI` and using
CVE metadata of format ``CVE: CVE-ID`` in the commit message of the patch file.
.. note::
Commit message metadata (``CVE: CVE-ID`` in a patch header) will not be scanned
in any patches that are remote, i.e. that are anything other than local files
referenced via ``file://`` in SRC_URI. However, a ``CVE-ID`` in a remote patch
file name itself will be registered.
If the recipe adds ``CVE-ID`` as flag of the :term:`CVE_STATUS` variable with status
mapped to ``Ignored``, then the CVE state is reported as ``Ignored``::