From patchwork Wed Nov 6 15:37:52 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Mikko Rapeli X-Patchwork-Id: 178737 Delivered-To: patch@linaro.org Received: by 2002:a92:38d5:0:0:0:0:0 with SMTP id g82csp867740ilf; Wed, 6 Nov 2019 08:49:33 -0800 (PST) X-Google-Smtp-Source: APXvYqxzmlJxh/ExTWtMZAqTu0jnJaNjZuJLxdT4VOAyNg/0AN0Azw2TXz3cHtV+OvWTvdmkxMCs X-Received: by 2002:a63:471b:: with SMTP id u27mr3889146pga.96.1573058972960; Wed, 06 Nov 2019 08:49:32 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1573058972; cv=none; d=google.com; s=arc-20160816; b=jXbqQaI3GEQ8TCgKY+Qx0gLuUK6w3VIwQRcSin2PwOGW02K3NfKX94Ie4pL3O0oxRN 5LEH2ah1/AaAw/MGIIRu8NKOKFDWxoeMvFSHF0qmG6wLeK+oE9E43dz+Z9swjH2f8K0/ mV3dwNTRRbYKXCmkDdSOMGIQnwmuA5487VWYdof7BPJak+fS9dyL56reJyoroRT5R4lU ksZmZa9MgZnESImIq0tVgojvmD9ihr2Y6+WzCkGw9fnTejvKTh7EfHkFVqYEu4QVybbV LUUfq03nsD+yioRjsefgPOgH3aQpckzDOfTyMcSMrzfJKzU6Q/4zHexdm+ylxe4yqO2i D9Fg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:references:in-reply-to:references :in-reply-to:message-id:date:to:from:dkim-signature:delivered-to; bh=aDDMxqmrHoMavCYXI+VaptcV6SOATbPKpllcFAdaAvw=; b=c/VdKvNiuQWvwjp77s4QiMshFSNLaVoNNlMUx9oO6J2SSGkmuRBUkIjEhsanZCAvpp QitAD1jGHSWu/jWD2UZeUuy+CTa4VehXbaTUoxL7OrzHQq49lTvGXfrje6uJuNE+5/6t 0CwH8YXHjCYOAO7xLZGaV99uEddE6zmWaFLhSHxzPY0hhxafipxWVaN+vgQd0Ocnsm/t C0+PE88X4xVio0uA0FldUNLV4MB7ubIfjKD4OMbPW4PZrl6i7V5kJd+5arP83CCk7iQE RyxeNLPtKj13rq1LTle73AgRuuh4zF0yMA6fyrzEXK3wPfVKlj+2iEjQx2aQkOy9zqUA hItw== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@kapsi.fi header.s=20161220 header.b=zAncJV+N; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=bmw.de Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id b7si30906579pgk.595.2019.11.06.08.49.32; Wed, 06 Nov 2019 08:49:32 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@kapsi.fi header.s=20161220 header.b=zAncJV+N; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=bmw.de Received: from ec2-34-214-78-129.us-west-2.compute.amazonaws.com (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id 88A747FBAC; Wed, 6 Nov 2019 16:49:12 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail.kapsi.fi (mail.kapsi.fi [91.232.154.25]) by mail.openembedded.org (Postfix) with ESMTP id E10CC7F83A for ; Wed, 6 Nov 2019 15:38:48 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=kapsi.fi; s=20161220; h=References:In-Reply-To:Message-Id:Date:Subject:Cc:To:From: Sender:Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=8JSNFkyDfKuo+l+0fGpLSm0yIBtedUVWQyGfc5D3YsM=; b=zAncJV+NfsbBGXYLD7rceEVHqt ChJcrtFGWe7r8zn5mxLs1my8WtdFlrhtaLbnUGDBsjjaD5CmUo6UcWtRmOVkrChM97sM/R+CXagpm p0RI86Jdj4nrWeiAEutcVSOXpaz1IzK7GgNabveok2V4il0EpgteuuEX/b+WTMSgnywBe3cA+plJw xLnhgNn8VE4p8nFXPB49r/sITLyfOVmkqxyYLHOntOODA0ePC05l0qmZjPBvKyd8B3NZSUaDnorch W0/HHhGwS3RFuPRlSlO2IKaRibiXaoyhWOIVXULiDMzJODz4QO+V/B45ZzqWqJ9i3nWdsfX09dKID 1V/hhagg==; Received: from kapsi.fi ([91.232.154.11] helo=lakka.kapsi.fi) by mail.kapsi.fi with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.89) (envelope-from ) id 1iSNOT-0000A9-My; Wed, 06 Nov 2019 17:38:49 +0200 Received: from mcfrisk by lakka.kapsi.fi with local (Exim 4.84_2) (envelope-from ) id 1iSNO6-0007ZO-Ro; Wed, 06 Nov 2019 17:38:26 +0200 From: Mikko Rapeli To: openembedded-core@lists.openembedded.org Date: Wed, 6 Nov 2019 17:37:52 +0200 Message-Id: <7c267e1400c6cddd22e256a6705233f2e22d49d3.1573047195.git.mikko.rapeli@bmw.de> X-Mailer: git-send-email 2.1.4 In-Reply-To: References: In-Reply-To: References: X-Rspam-Score: 6.0 (++++++) X-Rspam-Report: Action: add header Symbol: ARC_NA(0.00) Symbol: DMARC_POLICY_SOFTFAIL(0.10) Symbol: R_SPF_NEUTRAL(0.00) Symbol: FROM_HAS_DN(0.00) Symbol: TO_DN_SOME(0.00) Symbol: MULTIPLE_UNIQUE_HEADERS(4.89) Symbol: MIME_GOOD(-0.10) Symbol: TO_MATCH_ENVRCPT_ALL(0.00) Symbol: RCPT_COUNT_THREE(0.00) Symbol: RCVD_TLS_LAST(0.00) Symbol: MID_CONTAINS_FROM(1.00) Symbol: NEURAL_HAM(-0.00) Symbol: IP_SCORE(-0.15) Symbol: FORGED_SENDER(0.30) Symbol: R_DKIM_NA(0.00) Symbol: MIME_TRACE(0.00) Symbol: ASN(0.00) Symbol: FROM_NEQ_ENVFROM(0.00) Symbol: RCVD_COUNT_TWO(0.00) Message: (SPF): spf neutral Message-ID: 7c267e1400c6cddd22e256a6705233f2e22d49d3.1573047195.git.mikko.rapeli@bmw.de X-Rspam-Status: Yes X-Rspam-Bar: ++++++ X-SA-Exim-Connect-IP: 91.232.154.11 X-SA-Exim-Mail-From: mcfrisk@kapsi.fi X-SA-Exim-Scanned: No (on mail.kapsi.fi); SAEximRunCond expanded to false Subject: [OE-core] [PATCH RFC CFH][sumo 37/47] flex: set CVE_PRODUCT to include vendor X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org From: Ross Burton There are many projects called Flex and they have CVEs, so also set the vendor to remove these false positives. (From OE-Core rev: 0598ccdcb31e16f1d1227197591b10ba441fcfe2) Signed-off-by: Ross Burton Signed-off-by: Ross Burton Signed-off-by: Richard Purdie --- meta/recipes-devtools/flex/flex_2.6.0.bb | 3 +++ 1 file changed, 3 insertions(+) -- 1.9.1 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/recipes-devtools/flex/flex_2.6.0.bb b/meta/recipes-devtools/flex/flex_2.6.0.bb index b89b751..954fcf7 100644 --- a/meta/recipes-devtools/flex/flex_2.6.0.bb +++ b/meta/recipes-devtools/flex/flex_2.6.0.bb @@ -68,3 +68,6 @@ do_install_ptest() { -e 's/^builddir = \(.*\)/builddir = ./' -e 's/^top_builddir = \(.*\)/top_builddir = ./' \ -i ${D}${PTEST_PATH}/Makefile } + +# Not Apache Flex, or Adobe Flex, or IBM Flex. +CVE_PRODUCT = "flex_project:flex"