[OE-core] [PATCH] binutils: set CVE_VERSION

Ross Burton ross.burton at intel.com
Thu Mar 28 14:41:05 UTC 2019


PV is 2.32.0 even though the actual release upstream is 2.32.  To a human this
is insignificant, but to automated tooling it matters.  Specifically,
cve-check-tool can't identify CVEs that are in 2.32.

Set CVE_VERSION for now, which should be removed when PV and the upstream
version match again.

Signed-off-by: Ross Burton <ross.burton at intel.com>
---
 meta/recipes-devtools/binutils/binutils-2.32.inc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta/recipes-devtools/binutils/binutils-2.32.inc b/meta/recipes-devtools/binutils/binutils-2.32.inc
index 15406441241..5d0c16b13ec 100644
--- a/meta/recipes-devtools/binutils/binutils-2.32.inc
+++ b/meta/recipes-devtools/binutils/binutils-2.32.inc
@@ -20,6 +20,7 @@ def binutils_branch_version(d):
 # correctly set to match the upstream version tag).
 UPSTREAM_VERSION_UNKNOWN = "1"
 PV = "2.32.0"
+CVE_VERSION = "2.32"
 BINUPV = "${@binutils_branch_version(d)}"
 #BRANCH = "binutils-${BINUPV}-branch"
 BRANCH ?= "binutils-2_32-branch"
-- 
2.11.0



More information about the Openembedded-core mailing list