On Thu, 10 Dec 2015 12:50:20 Alexander Kanavin wrote: > On 12/09/2015 09:52 PM, akuster808 wrote: > > Can we get the CVE's fix by this update included in the commit? > > It's a version update to oe-core's development branch (e.g. > non-production, frequently updated), why have the CVEs in the commit > message?
So that it's clearer when a CVE has been resolved, however we ended up resolving it. We currently have a massive gap in what we know about CVE resolution because upgrades that fix them aren't tracked in any way. Cheers, Paul -- Paul Eggleton Intel Open Source Technology Centre -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core
