We could also do this programatically via a simple
inline python, that way it won't be missed during
uprev's.

I'll take care of that shortly, as I'm upreving
packages at the moment.

Bruce

In message: [meta-virtualization][PATCH] kubernetes: set CVE_VERSION explicitly
on 24/07/2023 Chen Qi via lists.yoctoproject.org wrote:

> From: Chen Qi <[email protected]>
> 
> The CVE_VERSION defaults to PV, but in NVD database, there's no
> prefixing 'v' in database. So set CVE_VERSION explicitly for better
> CVE scanning.
> 
> Signed-off-by: Chen Qi <[email protected]>
> ---
>  recipes-containers/kubernetes/kubernetes_git.bb | 1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/recipes-containers/kubernetes/kubernetes_git.bb 
> b/recipes-containers/kubernetes/kubernetes_git.bb
> index 8b7c9e0..fefb2c1 100644
> --- a/recipes-containers/kubernetes/kubernetes_git.bb
> +++ b/recipes-containers/kubernetes/kubernetes_git.bb
> @@ -6,6 +6,7 @@ maintenance, and scaling of applications. \
>  "
>  
>  PV = "v1.27.1+git${SRCREV_kubernetes}"
> +CVE_VERSION = "1.27.1"
>  SRCREV_kubernetes = "2555e0f90e80a13628f47eca5cde34decc89babb"
>  SRCREV_kubernetes-release = "21382abdbfa8e6a43fd417306fa649cb651cc06e"
>  PE = "1"
> -- 
> 2.34.1
> 

> 
> 
> 

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#8133): 
https://lists.yoctoproject.org/g/meta-virtualization/message/8133
Mute This Topic: https://lists.yoctoproject.org/mt/100322950/21656
Group Owner: [email protected]
Unsubscribe: 
https://lists.yoctoproject.org/g/meta-virtualization/leave/6693005/21656/1014668956/xyzzy
 [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to