| Message ID | 20190328144105.31018-1-ross.burton@intel.com |
|---|---|
| State | Accepted |
| Commit | 487c8356c22deb29867baf3da74f6d86502d5b3b |
| Headers | show |
| Series | binutils: set CVE_VERSION | expand |
On Thu, Mar 28, 2019 at 02:41:05PM +0000, Ross Burton wrote: > PV is 2.32.0 even though the actual release upstream is 2.32. To a human this > is insignificant, but to automated tooling it matters. Specifically, > cve-check-tool can't identify CVEs that are in 2.32. > > Set CVE_VERSION for now, which should be removed when PV and the upstream > version match again. > > Signed-off-by: Ross Burton <ross.burton@intel.com> Reviewed-by: Tom Rini <trini@konsulko.com> -- Tom -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core
diff --git a/meta/recipes-devtools/binutils/binutils-2.32.inc b/meta/recipes-devtools/binutils/binutils-2.32.inc index 15406441241..5d0c16b13ec 100644 --- a/meta/recipes-devtools/binutils/binutils-2.32.inc +++ b/meta/recipes-devtools/binutils/binutils-2.32.inc @@ -20,6 +20,7 @@ def binutils_branch_version(d): # correctly set to match the upstream version tag). UPSTREAM_VERSION_UNKNOWN = "1" PV = "2.32.0" +CVE_VERSION = "2.32" BINUPV = "${@binutils_branch_version(d)}" #BRANCH = "binutils-${BINUPV}-branch" BRANCH ?= "binutils-2_32-branch"
PV is 2.32.0 even though the actual release upstream is 2.32. To a human this is insignificant, but to automated tooling it matters. Specifically, cve-check-tool can't identify CVEs that are in 2.32. Set CVE_VERSION for now, which should be removed when PV and the upstream version match again. Signed-off-by: Ross Burton <ross.burton@intel.com> --- meta/recipes-devtools/binutils/binutils-2.32.inc | 1 + 1 file changed, 1 insertion(+) -- 2.11.0 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core