Skip to content

(RFC) bolt: disable CVE checking for this recipe#44

Closed
jpautler wants to merge 1 commit into
ni:nilrt/master/kirkstonefrom
jpautler:dev/master/kirkstone/turn-off-cve-check-for-bolt
Closed

(RFC) bolt: disable CVE checking for this recipe#44
jpautler wants to merge 1 commit into
ni:nilrt/master/kirkstonefrom
jpautler:dev/master/kirkstone/turn-off-cve-check-for-bolt

Conversation

@jpautler
Copy link
Copy Markdown

This bolt product does not currently have an entry in the CVE database. However, the default cve-check logic that maps recipes to products in the CVE database is incorrectly matching this package to a different bolt product made by bolt-cms. As a result, CVE checking incorrectly reports CVEs for that product for this package.

This is just an RFC to collect any feedback before I submit this change upstream. Do not pull at this time.

This bolt product does not currently have an entry in the CVE database.
However, the default cve-check logic that maps recipes to products in
the CVE database is incorrectly matching this package to a different
bolt product made by bolt-cms. As a result, CVE checking incorrectly
reports CVEs for that product for this package.

Signed-off-by: Jeffrey Pautler <jeffrey.pautler@ni.com>
Comment thread meta-oe/recipes-bsp/bolt/bolt_0.9.5.bb
Copy link
Copy Markdown

@amstewart amstewart left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jpautler
Copy link
Copy Markdown
Author

jpautler commented Oct 3, 2023

Just to close the RFC loop here, upstream had some feedback and preferred a different solution. I'll abandon this RFC PR and create a new one.

@jpautler jpautler closed this Oct 3, 2023
amstewart pushed a commit to amstewart/meta-openembedded that referenced this pull request Jan 30, 2024
Changelog:

Added
  - Document terminal colour detection overrides (ni#60) @hugovk
  - Add support for Python 3.13 (ni#55) @hugovk
Changed
  - Improve isatty check (ni#56) @XiaoliChan
  - Improve typing (ni#44) @marcin-serwin
  - Drop support for EOL Python 3.7 (ni#47) @hugovk

Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants