[OE-core] [RFC][PATCH 1/2] nss: Move to meta-oe

Thu Feb 27 14:03:18 UTC 2020

On Thu, 27 Feb 2020 at 14:28, Adrian Bunk <bunk at stusta.de> wrote:

> >...
>
> It is a crypto library with a history of unfixed CVEs in supported
> stable Yocto releases.
>

If the issue is unfixed CVEs, then I do not think it's particularly
relevant which layer the recipe is in. Stable release maintainers are not
expected to 'track and fix CVEs', that one is on users.

Alex
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openembedded.org/pipermail/openembedded-core/attachments/20200227/07a0f985/attachment.html>