Hello, An update of the CVE check improvement work: - the OE patchset: a v3 of the OE patchset has been submitted last week - there are CVE database corruptions in the autobuilder, but I wasn't able to reproduce it for now (not necessarily related) - the tool: ADP (extension) support has been merged today, we've got some bugfixes pending too (also expected today). The results improve with ADP, but we have also found a first bug in the ADP data :) For the code go to https://gitlab.com/syslinbit/public/yocto-vex-check branch "main" - the data conversion to ADP is in progress - tomorrow will send results of the night's run (locally I can see that the CVE update has captured fresh BIND cves et al)
Kind regards, Marta
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#202709): https://lists.openembedded.org/g/openembedded-core/message/202709 Mute This Topic: https://lists.openembedded.org/mt/107645630/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
