On Mon, Nov 24, 2025 at 5:09 AM Gyorgy Sarvari via lists.openembedded.org <[email protected]> wrote:
> On 11/24/25 13:58, Gyorgy Sarvari via lists.openembedded.org wrote: > > List of all open CVEs (76, out of which new this week: 29): > > > > > > Hi all, > > I would like to add a couple of random notes to this week's reports. > > 1. Whinlatter is now part of this report. The base for new/removed > comparison for the first report is the last week's result from master > branch. > > 2. There are some new CVEs which were missing in previous reports. This > is because until now I ran the checks with vanilla config, but these > reports were generated with a config that had more features added to > cover more recipes. And it has highlighted an issue with the CVE checks > with universe builds - if a recipe is excluded from building due to a > missing feature for example, that is excluded from CVE checks also. > Technically it makes sense, though I still find it somewhat unexpected. > Will try to spend some time on looking into bitbake about this, because > it makes it harder to get a fuller picture. > > 3. When I started sending these reports, I mentioned that I plan send > them till the end of November as an experiment. The end of November is > here - anybody has anything against getting these reports in the future? > Personally I think that they are useful even with their limitations, but > I might be biased, since I started it to scratch my own itch. If no one > will speak up, will keep sending them. > > Let me know if you have any questions or comments, either on this ML or > in private message. > I think this is good information for the community so I would prefer that you keep sending them. This does spur discussion like where we looked into dropping yasm, and figured that it's perhaps good to drop it now that chromium no longer needs it. nudge Ross ;) > > Thank you, > Gyorgy > > > >
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#122018): https://lists.openembedded.org/g/openembedded-devel/message/122018 Mute This Topic: https://lists.openembedded.org/mt/116450609/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
