<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-devtools/cve-check-tool/files, branch master-test</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=master-test</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=master-test'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2019-07-17T08:36:35+00:00</updated>
<entry>
<title>cve-check-tool: remove</title>
<updated>2019-07-17T08:36:35+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@intel.com</email>
</author>
<published>2019-07-16T12:46:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=0c0a056db8c0f918a0daf9145b162e50f1a44124'/>
<id>urn:sha1:0c0a056db8c0f918a0daf9145b162e50f1a44124</id>
<content type='text'>
(From OE-Core rev: 5388ed6d1378d647a65912dbd537f9ef3cb5760a)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>cve-check-tool: Fix progress bar patch for curl 7.55</title>
<updated>2017-08-19T21:15:38+00:00</updated>
<author>
<name>Jussi Kukkonen</name>
<email>jussi.kukkonen@intel.com</email>
</author>
<published>2017-08-18T12:38:16+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=a09aa675bb8757a677c3f8289b459aa4a064aa34'/>
<id>urn:sha1:a09aa675bb8757a677c3f8289b459aa4a064aa34</id>
<content type='text'>
CURL_FORMAT_OFF_T does not seem to exist anymore, use
CURL_FORMAT_CURL_OFF_T instead. This works with old and new curl.

(From OE-Core rev: 5548f9c87c6a10cda2baf6f198762380e55f6ae2)

Signed-off-by: Jussi Kukkonen &lt;jussi.kukkonen@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>cve-check-tool: fix crash on exceptions</title>
<updated>2017-06-12T14:08:30+00:00</updated>
<author>
<name>Peter Marko</name>
<email>peter.marko@siemens.com</email>
</author>
<published>2017-06-07T06:04:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=5a9cc41a3bbe3f955bf570d99f6474aa44b23d25'/>
<id>urn:sha1:5a9cc41a3bbe3f955bf570d99f6474aa44b23d25</id>
<content type='text'>
This fixes cve-check-tool crashes on exceptions.

(From OE-Core rev: 06bea09755ebda9bcfa49bf87249f80cb019157e)

Signed-off-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>cve-check-tool: backport a patch to make CVE checking work</title>
<updated>2017-05-18T13:01:48+00:00</updated>
<author>
<name>Chen Qi</name>
<email>Qi.Chen@windriver.com</email>
</author>
<published>2017-05-08T03:12:11+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=ef506f58da3a95fba2696df749b2b81f9c118847'/>
<id>urn:sha1:ef506f58da3a95fba2696df749b2b81f9c118847</id>
<content type='text'>
CVE checking in OE didn't work as do_populate_cve_db failed with the following
error message.

  [snip]/downloads/CVE_CHECK/nvdcve-2.0-2002.xml is not consistent

Backport a patch to fix this error.

(From OE-Core rev: ee55b5685aaa4be92d6d51f8641a559d4e34ce64)

Signed-off-by: Chen Qi &lt;Qi.Chen@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>cve-check-tool: Use CA cert bundle in correct sysroot</title>
<updated>2017-02-15T17:29:56+00:00</updated>
<author>
<name>Jussi Kukkonen</name>
<email>jussi.kukkonen@intel.com</email>
</author>
<published>2017-02-09T19:38:33+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=d887c24d5af0f570a259985fa99af5c56158fcfa'/>
<id>urn:sha1:d887c24d5af0f570a259985fa99af5c56158fcfa</id>
<content type='text'>
Native libcurl looks for CA certs in the wrong place by
default.
* Add patch that allows overriding the default CA certificate
  location. Patch is originally from meta-security-isafw.
* Use the new --cacert to set the correct CA bundle path

(From OE-Core rev: 73bd11d5190a072064128cc13b4537154d07b129)

Signed-off-by: Jussi Kukkonen &lt;jussi.kukkonen@intel.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>cve-check-tool: report progress when downloading CVE database</title>
<updated>2016-09-30T15:51:15+00:00</updated>
<author>
<name>André Draszik</name>
<email>git@andred.net</email>
</author>
<published>2016-09-28T12:05:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=e01466f91c58aefe7f280bd3a653ea20230692d0'/>
<id>urn:sha1:e01466f91c58aefe7f280bd3a653ea20230692d0</id>
<content type='text'>
We add a patch to report the progress, and at the same time
inform bitbake that progress can be extracted via the simple
'percent' progress handler.

(From OE-Core rev: 145a29ca99d9fec5eff97d77c8cff6356fe88ba5)

Signed-off-by: André Draszik &lt;git@andred.net&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>cve-check-tool: Add recipe</title>
<updated>2016-09-16T14:24:02+00:00</updated>
<author>
<name>Mariano Lopez</name>
<email>mariano.lopez@linux.intel.com</email>
</author>
<published>2016-08-24T18:58:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=189673244b571ad4b9fb121fbffded0e4568d31b'/>
<id>urn:sha1:189673244b571ad4b9fb121fbffded0e4568d31b</id>
<content type='text'>
cve-check-tool is a program for public CVEs checking.
This tool also seek to determine if a vulnerability has
been addressed by a patch.

The recipe also includes the do_populate_cve_db task
that will populate the database used by the tool.

[YOCTO #7515]

(From OE-Core rev: 5deadfe634638b99420342950bc544547f7121dc)

Signed-off-by: Mariano Lopez &lt;mariano.lopez@linux.intel.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
