On Thu, 28 Mar 2019 at 13:03, Chen Qi <qi.c...@windriver.com> wrote: > Setting PV to "2.32.0" results in cve checking tools failing to > report the actual unfixed CVEs. We need to change it to "2.32". > After the change, when `bitbake -c cve_check binutils-native', we have:
I sent a related patch yesterday: http://lists.openembedded.org/pipermail/openembedded-core/2019-March/280511.html The problem with setting PV properly, is that 2.32 is less than 2.32.0 and will cause the 'version going backwards' problem. But if RP/Khem are fine with it, I would prefer your patch. Alex -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core