> On 31 May 2024, at 14:01, Marta Rybczynska via lists.openembedded.org > <[email protected]> wrote: > > Update the CVE product name. The new Linux kernel CNA uses simply > "linux" as the product name. > > Signed-off-by: Marta Rybczynska <[email protected]> > --- > meta/recipes-kernel/linux/linux-yocto.inc | 3 +++ > 1 file changed, 3 insertions(+) > > diff --git a/meta/recipes-kernel/linux/linux-yocto.inc > b/meta/recipes-kernel/linux/linux-yocto.inc > index 0132fcffb3..f469bae8bd 100644 > --- a/meta/recipes-kernel/linux/linux-yocto.inc > +++ b/meta/recipes-kernel/linux/linux-yocto.inc > @@ -9,6 +9,9 @@ UPSTREAM_CHECK_GITTAGREGEX = "(?P<pver>\d+\.\d+(\.\d+)*)" > > RECIPE_NO_UPDATE_REASON = "Recipe is updated through a separate process" > > +# Kernel CNA uses this in their CVE entries > +CVE_PRODUCT = "linux:linux linux:linux_kernel"
The comment doesn’t explain what one “this” is, but as the default is set in kernel.bbclass the change should be there, so that all kernels use the correct names and not just linux-yocto. Ross
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#201024): https://lists.openembedded.org/g/openembedded-core/message/201024 Mute This Topic: https://lists.openembedded.org/mt/106407314/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
