[OE-core] [PATCH] cve-check.bbclass: do not download the CVE DB in package-specific tasks

2018-08-13 Thread Konstantin Shemyak
(). The DB will be at most (threshold + build_time) old. Signed-off-by: Konstantin Shemyak --- meta/classes/cve-check.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/classes/cve-check.bbclass b/meta/classes/cve-check.bbclass index 4d99838..12ad3e5 100644 --- a

Re: [OE-core] [PATCH] unzip: fix CVE-2018-1000035

2018-08-15 Thread Konstantin Shemyak
quot; to let the automatic CVE checker detect that this patch solves this particular CVE. Konstantin Shemyak. -- ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core

[OE-core] [PATCH 1/1] cve-check-tool: correctly exported web proxies

2018-02-19 Thread Konstantin Shemyak
d proxies. Exported all proxy-related environment variables to 'cve-check-update' and removed the unneeded export from 'cve-check-tool'. Signed-off-by: Konstantin Shemyak --- meta/classes/cve-check.bbclass | 3 --- meta/recipes-devtools/cve-che

[OE-core] [PATCH 0/1] cve-check-tool: correctly exported web proxies

2018-02-19 Thread Konstantin Shemyak
Commit 0466c81f has lost passing web proxies to the download process, which makes whole CVE checking fail. In turn, in cve-check.bbclass setting the proxies is not needed, as the called process does not connect to the network. Konstantin Shemyak (1): cve-check-tool: correctly exported proxies