Peter wrote:
> The CVE_STATUS needs to stay (forever), as r118 > 1.x.y so it would reappear 
> in CVE reports.
> Also, you're not fixing this CVE with this upgrade, so commit message should 
> not have "CVE: " flag.

This was a bit confusing to me. I read up on the docs again and understand the 
system now.
I mistook "r118 being bigger" with regard to release order and not simple 
lexical order.
Sorry for the inconvenience.

> Additionally upstream-status flag is missing in your patch, move it there 
> from commit message.

Perfect hint, I read patch and assumed the patch we generate and send to the 
mailing list. Not the patch files themselves.

> Cheers,
> Peter

As a side note, working with the mailing list is still a bit obscure to me so I 
apologize for any mistakes in advance.

Cheers,
Thorsten
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#203253): 
https://lists.openembedded.org/g/openembedded-core/message/203253
Mute This Topic: https://lists.openembedded.org/mt/107871250/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to