Peter Marko c06e4e6e60 spdx30: fix cve status for patch files in VEX ...

This commit fixes commit 08595b39b46ef2bf3a928d4528292ee31a990c98
which adapts vex creation between function create_spdx where all changes
were backported and funtion get_patched_cves where changes were not
backported.

CVE patches were previously ignored as they cannot be decoded from
CVE_STATUS variables and each caused a warning like:
WARNING: ncurses-native-6.4-r0 do_create_spdx: Skipping CVE-2023-50495 — missing or unknown CVE status

Master branch uses fix-file-included for CVE patches however since
cve-check-map.conf was not part of spdx-3.0 backport, closest one
available (backported-patch) was implemented.

(From OE-Core rev: 8d14b2bb02861612130f02c445392f34090ba5d9)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-11-26 07:50:35 -08:00

..

bblayers

bblayers/makesetup.py: Move git utility functions to oe.buildcfg module

2024-03-30 22:25:43 +00:00

oe

spdx30: fix cve status for patch files in VEX

2025-11-26 07:50:35 -08:00

oeqa

oeqa: spdx: Add tar test for SPDX 2.2

2025-11-14 06:45:30 -08:00

patchtest

patchtest: test_metadata: fix invalid escape sequences

2024-05-23 08:55:01 -07:00

buildstats.py

lib: Add copyright statements to files without one

2022-08-12 12:00:43 +01:00

rootfspostcommands.py

rootfspostcommands.py: Cleanup subid backup files generated by shadow-utils

2022-08-25 11:08:06 +01:00