[OE-core] [PATCH 1/2] cve-report: add scripts to generate CVE reports

cvert-kernel - generate CVE report for the Linux kernel. NVD entries for the Linux kernel is almost always outdated. For example, https://nvd.nist.gov/vuln/detail/CVE-2018-1065 is shown as matched for "versions up to (including) 4.15.7", however the patch 57ebd808a97d has been back ported

[OE-core] [PATCH 2/2] cve-report.bbclass: add class

Implements "report_cve" and "report_patched" tasks. "report_patched" prepares image manifest with patched CVE info. "report_cve" runs cvert-* scripts to generate kernel and package CVE reports. You can configure it to set report filenames, reuse NVD feeds, stop after manifest generation and

Re: [OE-core] [PATCH] lib/oe/utils: add eol to format_pkg_list()

From: Richard Purdie Sent: Wednesday, October 3, 2018 5:23 PM gt> Append '\n' to the formatted string before return. If you write it gt> to the (manifest) file, it will ensure file ends with a newline. gt> gt> Many GNU utilities have problems processing the last line of a file gt> if it is not

Re: [OE-core] [PATCH] lib/oe/utils: add eol to format_pkg_list()

From: Richard Purdie Sent: Wednesday, October 3, 2018 5:23 PM gt> Append '\n' to the formatted string before return. If you write it gt> to the (manifest) file, it will ensure file ends with a newline. gt> gt> Many GNU utilities have problems processing the last line of a file gt> if it is not

Re: [OE-core] [PATCH] archiver: avoid empty incfile in ar_recipe

Andrei, From: Andrei Gherzan Sent: Friday, November 1, 2019 13:28 To: Grygorii Tertychnyi (gtertych); openembedded-core@lists.openembedded.org Cc: xe-linux-external(mailer list) Subject: Re: [OE-core] [PATCH] archiver: avoid empty incfile in ar_recipe >> do_ar_recipe fails on perf recipe on

Re: [OE-core] [PATCH] archiver: avoid empty incfile in ar_recipe

Hi Andrei, From: Andrei Gherzan Sent: Monday, November 11, 2019 13:18 Subject: Re: [OE-core] [PATCH] archiver: avoid empty incfile in ar_recipe >> Not sure I understand. Archiver class does not interpret "include" directive. >> It just parses text files. The regular expression looks correct: >>

Re: [OE-core] [PATCH] archiver: avoid empty incfile in ar_recipe

ping From: Grygorii Tertychnyi (gtertych) Sent: Monday, November 4, 2019 17:09 To: Andrei Gherzan; openembedded-core@lists.openembedded.org Cc: xe-linux-external(mailer list) Subject: Re: [OE-core] [PATCH] archiver: avoid empty incfile in ar_recipe

Re: [OE-core] [PATCH] archiver: avoid empty incfile in ar_recipe

Hi Andrei, On Monday, November 11, 2019 19:41, Andrei Gherzan wrote: > Hi, > > On 11/11/2019 12:29, Grygorii Tertychnyi (gtertych) wrote: >> Hi Andrei, >> >> From: Andrei Gherzan >> Sent: Monday, November 11, 2019 13:18 >> Subject: Re: [OE-core] [PATCH] archiver: avoid empty incfile in