Ralph Siemsen 291da72ce1 tar: filter CVEs using vendor name ...

Recently a number of CVEs have been logged against a nodejs project
called "node-tar". These appear as false positives against the GNU tar
being built by Yocto. Some of these have been manually excluded using
CVE_CHECK_WHITELIST.

To avoid this problem, use the vendor name (in addition to package name)
for filtering CVEs. The syntax for this is:
  CVE_PRODUCT = "vendor:package"
When not specified, the vendor defaults to "%" which matches anything.

(From OE-Core rev: d11e970c6e2482ad0b21994e4ec85ddf2aea1ede)

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 45d1a0bea0c628f84a00d641a4d323491988106f)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2021-10-29 11:17:25 +01:00

..

classes

baremetal-image: Fix do_image dependencies

2021-10-08 16:44:00 +01:00

conf

multilib: Avoid sysroot race issues when multilib enabled

2021-10-08 16:43:59 +01:00

files

spdx-licenses.json: Use 3.14 tagged version

2021-09-28 17:55:04 +01:00

lib

oeqa/manual: Fix no longer valid URLs

2021-10-08 16:43:59 +01:00

recipes-bsp

systemd: '${systemd_unitdir}/system' => '${systemd_system_unitdir}'

2021-09-07 21:54:11 +01:00

recipes-connectivity

inetutils: fix CVE-2021-40491

2021-09-26 12:05:03 +01:00

recipes-core

build-appliance-image: Update to honister head revision

2021-10-11 11:06:51 +01:00

recipes-devtools

rpm: Deterministically set vendor macro entry

2021-10-08 16:43:59 +01:00

recipes-example

rustfmt: fix SRC_URI

2021-09-01 14:06:17 +01:00

recipes-extended

tar: filter CVEs using vendor name

2021-10-29 11:17:25 +01:00

recipes-gnome

gobject-introspection: Don't write $HOME into scripts

2021-10-02 23:09:22 +01:00

recipes-graphics

mesa: Ensure megadrivers runtime mappings are deterministic

2021-10-02 23:09:22 +01:00

recipes-kernel

lttng-ust: fix do_compile failure for arm32 with DEBUG_BUILD enabled

2021-10-09 17:21:47 +01:00

recipes-multimedia

libsamplerate0: Set correct soname for 0.1.9

2021-09-26 14:36:48 +01:00

recipes-rt

Convert to new override syntax

2021-08-02 15:44:10 +01:00

recipes-sato

recipes: Add missing pkgconfig inherit

2021-09-21 23:44:08 +01:00

recipes-support

ptest-runner: install -collect-system-data script

2021-10-09 17:21:47 +01:00

site

site: Drop ORBit2 relared cached variables

2021-09-23 13:49:11 +01:00

COPYING.MIT

Add missing licence files (COPYING.MIT)

2006-07-23 13:52:32 +00:00

recipes.txt

Remove LSB support

2019-08-29 14:05:12 +01:00