[OE-core] [RFC][PATCH 1/2] nss: Move to meta-oe
akuster808
akuster808 at gmail.com
Mon Feb 24 16:32:24 UTC 2020
Adrian,
On 2/23/20 9:17 PM, Adrian Bunk wrote:
> On Sun, Feb 23, 2020 at 04:25:18PM -0800, Khem Raj wrote:
>> On Sun, Feb 23, 2020 at 11:34 AM Adrian Bunk <bunk at stusta.de> wrote:
>>> rpm was the last user in OE-core.
>> we should also assess external dependencies especially on libraries,
>> there might be layers which do not depend on meta-oe but use nss
>> or enable nss packageconfigs in core components like curl.
>> ...
> Is providing a crypto library in OE-core without providing security
> support better than not shipping it?
>
> nss in warrior seems to lack fixes for at least 5 CVEs.
I don't see how that is relevant to the RFC?
nss package is not moving out for warrior nor zeus.
- armin
>
> cu
> Adrian
More information about the Openembedded-core
mailing list