Hi Ross,

I have realized this and sent v2 with yoctoproject only 10 minutes after 
sending this patch.
I guess I have forgotten to chain it with --in-reply-to=, sorry for that.

Peter

> -----Original Message-----
> From: Ross Burton <[email protected]>
> Sent: Monday, November 25, 2024 12:30
> To: Marko, Peter (FT D EU SK BFS1) <[email protected]>
> Cc: [email protected]
> Subject: Re: [OE-core][PATCH] builder: set CVE_PRODUCT
> 
> On 24 Nov 2024, at 12:27, Peter Marko via lists.openembedded.org
> <[email protected]> wrote:
> > -CVE_STATUS[CVE-2008-4178] = "cpe-incorrect: This CVE is for an unrelated
> builder"
> > +# do not report CVEs for other builder apps
> > +CVE_PRODUCT = "yocto:builder"
> 
> Please don’t make up vendor names. There are already yocto_project and
> yoctoproject vendors so let's not add another variation.  Personally, I lean
> towards yoctoproject.
> 
> Ross
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#207784): 
https://lists.openembedded.org/g/openembedded-core/message/207784
Mute This Topic: https://lists.openembedded.org/mt/109753300/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to