Re: [OE-core] CVE's for linux-yocto

2021-02-18 Thread Mikko Rapeli
Hi, On Tue, Feb 16, 2021 at 08:23:31AM -1000, Steve Sakoman wrote: > The weekly cve reports for master, gatesgarth, and dunfell currently > omit linux-yocto since the CPE database for the kernel is notoriously > incomplete in versioning information. > > This morning at the YP technical team meeti

Re: [OE-core] CVE's for linux-yocto

2021-02-16 Thread Steve Sakoman
On Tue, Feb 16, 2021 at 9:02 AM akuster808 wrote: > > > > On 2/16/21 10:23 AM, Steve Sakoman wrote: > > The weekly cve reports for master, gatesgarth, and dunfell currently > > omit linux-yocto since the CPE database for the kernel is notoriously > > incomplete in versioning information. > > > > T

Re: [OE-core] CVE's for linux-yocto

2021-02-16 Thread akuster
On 2/16/21 10:23 AM, Steve Sakoman wrote: > The weekly cve reports for master, gatesgarth, and dunfell currently > omit linux-yocto since the CPE database for the kernel is notoriously > incomplete in versioning information. > > This morning at the YP technical team meeting we discussed this and

[OE-core] CVE's for linux-yocto

2021-02-16 Thread Steve Sakoman
The weekly cve reports for master, gatesgarth, and dunfell currently omit linux-yocto since the CPE database for the kernel is notoriously incomplete in versioning information. This morning at the YP technical team meeting we discussed this and decided to see if we might, as a team, expend some ef