Skip to content
Snippets Groups Projects

Analyze cve-check warnings/output in the world build of Oniro

    • Closed Issue created by Marta Rybczynska @mrybczyn

    Value

    Reliable security analysis result

    Description

    Look into the cve-check world output and find out if we:

    • see all packages
    • identify warnings/errors

    In scope

    World build analysis for Oniro, including bootloaders, SDK

    Out of Scope

    SBOM generation

    Acceptance Criteria

    Analysis done, tickets filles

    Applicable Market Segments

    • All

    Applicable Personas

    • Product Integrator
    • Software Quality Auditor
    To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information

    Child items ...

    • Activity

    • Marta Rybczynska changed milestone to %goofy beta

      changed milestone to %goofy beta

    • Marta Rybczynska added goofybeta teamsecurity labels

      added goofybeta teamsecurity labels

    • Marta Rybczynska set weight to 4

      set weight to 4

    • Marta Rybczynska assigned to @mrybczyn

      assigned to @mrybczyn

    • Marta Rybczynska
      Marta Rybczynska @mrybczyn ·
      Author Developer

      Current result:

      WARNING: p7zip-16.02-r0 do_cve_check: Found unpatched CVE (CVE-2016-9296 CVE-2018-5996), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/p7zip/16.02-r0/temp/cve.log
WARNING: zsh-5.8-r0 do_cve_check: Found unpatched CVE (CVE-2021-45444), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zsh/5.8-r0/temp/cve.log
WARNING: unzip-1_6.0-r5 do_cve_check: Found unpatched CVE (CVE-2022-0529 CVE-2022-0530), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/unzip/1_6.0-r5/temp/cve.log
WARNING: pending-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/pending/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: tcpreplay-4.4.1-r0 do_cve_check: Found unpatched CVE (CVE-2022-25484 CVE-2022-27416 CVE-2022-27418 CVE-2022-27939 CVE-2022-27940 CVE-2022-27941 CVE-2022-27942 CVE-2022-28487), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/tcpreplay/4.4.1-r0/temp/cve.log
WARNING: zephyr-http-client-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zephyr-http-client/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: redis-7.0-rc3-r0 do_cve_check: Found unpatched CVE (CVE-2022-0543), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/redis/7.0-rc3-r0/temp/cve.log
WARNING: uw-imap-2007f-r0 do_cve_check: Found unpatched CVE (CVE-2005-0198 CVE-2018-19518), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/uw-imap/2007f-r0/temp/cve.log
WARNING: nikto-2.1.6-r0 do_cve_check: Found unpatched CVE (CVE-2018-11652), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/nikto/2.1.6-r0/temp/cve.log
WARNING: nasm-2.15.05-r0 do_cve_check: Found unpatched CVE (CVE-2020-18974), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/nasm/2.15.05-r0/temp/cve.log
WARNING: zephyr-coap-client-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zephyr-coap-client/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: rsyslog-8.2202.0-r0 do_cve_check: Found unpatched CVE (CVE-2015-3243 CVE-2022-24903), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/rsyslog/8.2202.0-r0/temp/cve.log
WARNING: qemu-6.2.0-r0 do_cve_check: Found unpatched CVE (CVE-2019-12067 CVE-2021-20255 CVE-2021-3611 CVE-2021-3750), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/qemu/6.2.0-r0/temp/cve.log
WARNING: smarty-4.1.0-r0 do_cve_check: Found unpatched CVE (CVE-2020-10375 CVE-2022-29221), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/smarty/4.1.0-r0/temp/cve.log
WARNING: gcc-source-6.x.arc-6.x.arc-r0 do_cve_check: Found unpatched CVE (CVE-2018-12886 CVE-2019-15847 CVE-2021-37322), for more information check /oniroproject-current/build-oniro-linux/tmp/work-shared/gcc-6.x.arc-r0/temp/cve.log
WARNING: libqrcodegencpp-1.7.0-r0 do_cve_check: URL: git://github.com/nayuki/QR-Code-generator.git;protocol=https does not set any branch parameter. The future default branch used by tools and repositories is uncertain and we will therefore soon require this is set in all git urls.
WARNING: openjpeg-2.4.0-r0 do_cve_check: Found unpatched CVE (CVE-2015-1239 CVE-2016-9675 CVE-2021-3575), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/openjpeg/2.4.0-r0/temp/cve.log
WARNING: postgresql-14.3-r0 do_cve_check: Found unpatched CVE (CVE-2017-8806), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/postgresql/14.3-r0/temp/cve.log
WARNING: ghostscript-9.55.0-r0 do_cve_check: Found unpatched CVE (CVE-2022-2085), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/ghostscript/9.55.0-r0/temp/cve.log
WARNING: emacs-27.2-r0 do_cve_check: Found unpatched CVE (CVE-2007-6109), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/emacs/27.2-r0/temp/cve.log
WARNING: xerces-c-3.1.4-r0 do_cve_check: Found unpatched CVE (CVE-2018-1311), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/xerces-c/3.1.4-r0/temp/cve.log
WARNING: proftpd-1.3.7c-r0 do_cve_check: Found unpatched CVE (CVE-2001-0027), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/proftpd/1.3.7c-r0/temp/cve.log
WARNING: audiofile-0.3.6-r0 do_cve_check: Found unpatched CVE (CVE-2017-6827 CVE-2017-6828 CVE-2017-6829 CVE-2017-6830 CVE-2017-6831 CVE-2017-6832 CVE-2017-6833 CVE-2017-6834 CVE-2017-6835 CVE-2017-6836 CVE-2017-6837 CVE-2017-6838 CVE-2017-6839), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/audiofile/0.3.6-r0/temp/cve.log
WARNING: poll-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/poll/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: queue-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/queue/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: zephyr-peripheral-esp-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zephyr-peripheral-esp/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: php-8.1.6-r0 do_cve_check: Found unpatched CVE (CVE-2007-2728 CVE-2007-3205 CVE-2007-4596 CVE-2022-31625 CVE-2022-31626), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/php/8.1.6-r0/temp/cve.log
WARNING: interrupt-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/interrupt/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: wavpack-4.60.1-r0 do_cve_check: Found unpatched CVE (CVE-2016-10169 CVE-2016-10170 CVE-2016-10171 CVE-2016-10172 CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841 CVE-2019-1010315 CVE-2019-1010317 CVE-2019-1010319 CVE-2019-11498), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/wavpack/4.60.1-r0/temp/cve.log
WARNING: device-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/device/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: samba-4.14.13-r0 do_cve_check: Found unpatched CVE (CVE-2021-23192 CVE-2021-44141), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/samba/4.14.13-r0/temp/cve.log
WARNING: sssd-2.5.2-r0 do_cve_check: Found unpatched CVE (CVE-2018-16838), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/sssd/2.5.2-r0/temp/cve.log
WARNING: jasper-2.0.33-r0 do_cve_check: Found unpatched CVE (CVE-2015-8751), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/jasper/2.0.33-r0/temp/cve.log
WARNING: bind-9.18.2-r0 do_cve_check: Found unpatched CVE (CVE-2022-1183), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/bind/9.18.2-r0/temp/cve.log
WARNING: busybox-1.35.0-r0 do_cve_check: Found unpatched CVE (CVE-2022-30065), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/busybox/1.35.0-r0/temp/cve.log
WARNING: ez-ipupdate-3.0.11b7-r0 do_cve_check: Found unpatched CVE (CVE-2003-0887), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/ez-ipupdate/3.0.11b7-r0/temp/cve.log
WARNING: lockdev-1_1.0.3-r0 do_cve_check: /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/lockdev/1_1.0.3-r0/lockdev_1.0.3-1.6.diff does not exist, cannot extract CVE list
WARNING: hdf5-1.8.21-r0 do_cve_check: Found unpatched CVE (CVE-2018-17233 CVE-2018-17234 CVE-2018-17237 CVE-2018-17432 CVE-2018-17433 CVE-2018-17434 CVE-2018-17435 CVE-2018-17436 CVE-2018-17437 CVE-2018-17438 CVE-2019-8396 CVE-2020-10809 CVE-2020-10810 CVE-2020-10811 CVE-2020-10812), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/hdf5/1.8.21-r0/temp/cve.log
WARNING: links-2.25-r0 do_cve_check: Found unpatched CVE (CVE-2008-3319), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/links/2.25-r0/temp/cve.log
WARNING: hi3861-1.0-r0 do_cve_check: URL: git://gitee.com/openharmony/device_hisilicon_hispark_pegasus.git;protocol=http does not set any branch parameter. The future default branch used by tools and repositories is uncertain and we will therefore soon require this is set in all git urls.
WARNING: libtar-1.2.20-r0 do_cve_check: Found unpatched CVE (CVE-2013-4420), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/libtar/1.2.20-r0/temp/cve.log
WARNING: zephyr-philosophers-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zephyr-philosophers/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: sblim-sfcb-1.4.9-r0 do_cve_check: Found unpatched CVE (CVE-2012-3381), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/sblim-sfcb/1.4.9-r0/temp/cve.log
WARNING: zephyr-peripheral-hr-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zephyr-peripheral-hr/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: tmux-3.1c-r0 do_cve_check: Found unpatched CVE (CVE-2020-27347), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/tmux/3.1c-r0/temp/cve.log
WARNING: mariadb-10.7.4-r0 do_cve_check: Found unpatched CVE (CVE-2022-27444 CVE-2022-27446 CVE-2022-27451 CVE-2022-27452 CVE-2022-27457), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/mariadb/10.7.4-r0/temp/cve.log
WARNING: libass-0.14.0-r0 do_cve_check: Found unpatched CVE (CVE-2020-26682), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/libass/0.14.0-r0/temp/cve.log
WARNING: usrsctp-git-r0 do_cve_check: usrsctp: Failed to compare git < 2019-12-20 for CVE-2019-20503
WARNING: db-1_5.3.28-r1 do_cve_check: Found unpatched CVE (CVE-2015-2583 CVE-2015-2624 CVE-2015-2626 CVE-2015-2640 CVE-2015-2654 CVE-2015-2656 CVE-2015-4754 CVE-2015-4764 CVE-2015-4774 CVE-2015-4775 CVE-2015-4776 CVE-2015-4777 CVE-2015-4778 CVE-2015-4779 CVE-2015-4780 CVE-2015-4781 CVE-2015-4782 CVE-2015-4783 CVE-2015-4784 CVE-2015-4785 CVE-2015-4786 CVE-2015-4787 CVE-2015-4788 CVE-2015-4789 CVE-2015-4790 CVE-2016-0682 CVE-2016-0689 CVE-2016-0692 CVE-2016-0694 CVE-2016-3418 CVE-2020-2981), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/db/1_5.3.28-r1/temp/cve.log
WARNING: wireshark-1_3.4.11-r0 do_cve_check: Found unpatched CVE (CVE-2021-4190 CVE-2022-0581 CVE-2022-0582 CVE-2022-0583 CVE-2022-0585 CVE-2022-0586), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/wireshark/1_3.4.11-r0/temp/cve.log
WARNING: common-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/common/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: memcached-1.6.15-r0 do_cve_check: Found unpatched CVE (CVE-2022-26635), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/memcached/1.6.15-r0/temp/cve.log
WARNING: xip-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/xip/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: strace-5.16-r0 do_cve_check: Found unpatched CVE (CVE-2000-0006), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/strace/5.16-r0/temp/cve.log
WARNING: giflib-5.2.1-r0 do_cve_check: Found unpatched CVE (CVE-2022-28506), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/giflib/5.2.1-r0/temp/cve.log
WARNING: zephyr-helloworld-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zephyr-helloworld/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: procmail-3.22-r0 do_cve_check: Found unpatched CVE (CVE-1999-0475 CVE-2014-3618 CVE-2017-16844), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/procmail/3.22-r0/temp/cve.log
WARNING: vim-8.2.5083-r0 do_cve_check: Found unpatched CVE (CVE-2022-2124 CVE-2022-2125 CVE-2022-2126 CVE-2022-2129), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/vim/8.2.5083-r0/temp/cve.log
WARNING: generate-zephyr-machines-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/generate-zephyr-machines/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: thrift-0.16.0-r0 do_cve_check: Found unpatched CVE (CVE-2019-11938 CVE-2019-11939 CVE-2019-3552 CVE-2019-3553 CVE-2019-3558 CVE-2019-3559 CVE-2019-3564 CVE-2019-3565 CVE-2021-24028), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/thrift/0.16.0-r0/temp/cve.log
WARNING: hunspell-1.7.0-r0 do_cve_check: Found unpatched CVE (CVE-2019-16707), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/hunspell/1.7.0-r0/temp/cve.log
WARNING: cifs-utils-6.14-r0 do_cve_check: Found unpatched CVE (CVE-2022-27239 CVE-2022-29869), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/cifs-utils/6.14-r0/temp/cve.log
WARNING: cups-2.4.2-r0 do_cve_check: Found unpatched CVE (CVE-2022-26691), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/cups/2.4.2-r0/temp/cve.log
WARNING: zlog-1.2.15-r0 do_cve_check: Found unpatched CVE (CVE-2021-43521), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zlog/1.2.15-r0/temp/cve.log
WARNING: dnsmasq-2.86-r0 do_cve_check: Found unpatched CVE (CVE-2021-45951 CVE-2021-45952 CVE-2021-45953 CVE-2021-45954 CVE-2021-45955 CVE-2021-45956 CVE-2021-45957), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/dnsmasq/2.86-r0/temp/cve.log
WARNING: influxdb-1.8.10-r0 do_cve_check: Found unpatched CVE (CVE-2019-10329), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/influxdb/1.8.10-r0/temp/cve.log
WARNING: keepalived-2.2.2-r0 do_cve_check: Found unpatched CVE (CVE-2021-44225), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/keepalived/2.2.2-r0/temp/cve.log
WARNING: libplist-2.2.0-r0 do_cve_check: Found unpatched CVE (CVE-2017-5834 CVE-2017-5835 CVE-2017-5836), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/libplist/2.2.0-r0/temp/cve.log
WARNING: zephyr-kernel-test-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zephyr-kernel-test/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: pidgin-2.14.2-r0 do_cve_check: Found unpatched CVE (CVE-2010-1624 CVE-2011-3594 CVE-2022-26491), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/pidgin/2.14.2-r0/temp/cve.log
WARNING: usbredir-0.9.0-r0 do_cve_check: Found unpatched CVE (CVE-2021-3700), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/usbredir/0.9.0-r0/temp/cve.log
WARNING: gnulib-2018-03-07.03-r0 do_cve_check: Found unpatched CVE (CVE-2018-17942), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/gnulib/2018-03-07.03-r0/temp/cve.log
WARNING: ntp-4.2.8p15-r0 do_cve_check: Found unpatched CVE (CVE-2015-5146 CVE-2015-5300 CVE-2015-7975 CVE-2015-7976 CVE-2015-7977 CVE-2015-7978 CVE-2015-7979 CVE-2015-8138 CVE-2015-8139 CVE-2015-8140 CVE-2015-8158 CVE-2016-1547 CVE-2016-2516 CVE-2016-2517 CVE-2016-2519 CVE-2016-7429 CVE-2016-7433 CVE-2016-9310 CVE-2016-9311 CVE-2019-11331), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/ntp/4.2.8p15-r0/temp/cve.log
WARNING: zephyr-kernel-test-twister-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zephyr-kernel-test-twister/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: zephyr-mqtt-publisher-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zephyr-mqtt-publisher/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: dhrystone-2.1-r0 do_cve_check: Found unpatched CVE (CVE-2020-23026), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/dhrystone/2.1-r0/temp/cve.log
WARNING: sanlock-3.8.4+gitAUTOINC+a181e95137-r0 do_cve_check: Found unpatched CVE (CVE-2012-5638), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/sanlock/3.8.4+gitAUTOINC+a181e95137-r0/temp/cve.log
WARNING: zephyr-blinky-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zephyr-blinky/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: netkit-tftp-0.17-r0 do_cve_check: /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/netkit-tftp/0.17-r0/netkit-tftp_0.17-18.diff does not exist, cannot extract CVE list
WARNING: freerdp-1_2.6.1-r0 do_cve_check: Found unpatched CVE (CVE-2022-24882 CVE-2022-24883), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/freerdp/1_2.6.1-r0/temp/cve.log
WARNING: libtorrent-0.13.8-r0 do_cve_check: Found unpatched CVE (CVE-2009-1760 CVE-2016-5301), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/libtorrent/0.13.8-r0/temp/cve.log
WARNING: dovecot-2.3.14-r0 do_cve_check: Found unpatched CVE (CVE-2020-28200 CVE-2021-29157 CVE-2021-33515), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/dovecot/2.3.14-r0/temp/cve.log
WARNING: zephyr-coap-server-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zephyr-coap-server/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: sqlite-2.8.17-r7 do_cve_check: Found unpatched CVE (CVE-2015-3414 CVE-2015-3415 CVE-2015-3416 CVE-2015-3717 CVE-2015-5895 CVE-2015-6607 CVE-2016-6153 CVE-2017-10989 CVE-2018-20346 CVE-2018-20505 CVE-2018-20506 CVE-2018-8740 CVE-2019-19645 CVE-2019-19646 CVE-2020-11655 CVE-2020-11656 CVE-2020-13434 CVE-2020-13435 CVE-2020-13630 CVE-2020-13631 CVE-2020-13632 CVE-2020-15358), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/sqlite/2.8.17-r7/temp/cve.log
WARNING: imagemagick-7.0.10_25-r0 do_cve_check: Found unpatched CVE (CVE-2007-1667 CVE-2014-9804 CVE-2014-9805 CVE-2014-9806 CVE-2014-9807 CVE-2014-9808 CVE-2014-9809 CVE-2014-9810 CVE-2014-9811 CVE-2014-9812 CVE-2014-9813 CVE-2014-9814 CVE-2014-9815 CVE-2014-9816 CVE-2014-9817 CVE-2014-9818 CVE-2014-9819 CVE-2014-9820 CVE-2014-9821 CVE-2014-9822 CVE-2014-9823 CVE-2014-9824 CVE-2014-9825 CVE-2014-9826 CVE-2014-9827 CVE-2014-9828 CVE-2014-9829 CVE-2014-9830 CVE-2014-9831 CVE-2014-9848 CVE-2014-9852 CVE-2014-9853 CVE-2014-9854 CVE-2014-9907 CVE-2016-10062 CVE-2016-10144 CVE-2016-10145 CVE-2016-10146 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516 CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 CVE-2016-7522 CVE-2016-7523 CVE-2016-7524 CVE-2016-7525 CVE-2016-7526 CVE-2016-7527 CVE-2016-7528 CVE-2016-7529 CVE-2016-7530 CVE-2016-7531 CVE-2016-7532 CVE-2016-7533 CVE-2016-7534 CVE-2016-7535 CVE-2016-7536 CVE-2016-7537 CVE-2016-7538 CVE-2017-5506 CVE-2017-5509 CVE-2017-5510 CVE-2017-5511 CVE-2020-13902 CVE-2020-27829 CVE-2020-29599 CVE-2021-20176 CVE-2021-20241 CVE-2021-20243 CVE-2021-20244 CVE-2021-20245 CVE-2021-20246 CVE-2021-20309 CVE-2021-20310 CVE-2021-20311 CVE-2021-20312 CVE-2021-20313 CVE-2021-3596 CVE-2021-3610 CVE-2022-1114), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/imagemagick/7.0.10_25-r0/temp/cve.log
WARNING: openflow-1.0+gitAUTOINC+c84f33f09d-r0 do_cve_check: openflow: Failed to compare 1.0 <= carbon for CVE-2018-1078
WARNING: openflow-1.0+gitAUTOINC+c84f33f09d-r0 do_cve_check: Found unpatched CVE (CVE-2015-1611 CVE-2015-1612 CVE-2018-1000155), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/openflow/1.0+gitAUTOINC+c84f33f09d-r0/temp/cve.log
WARNING: quagga-1.2.4-r0 do_cve_check: Found unpatched CVE (CVE-2016-4049 CVE-2017-3224 CVE-2021-44038), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/quagga/1.2.4-r0/temp/cve.log
WARNING: atop-2.4.0-r0 do_cve_check: Found unpatched CVE (CVE-2011-3618), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/atop/2.4.0-r0/temp/cve.log
WARNING: id3lib-3.8.3-r1 do_cve_check: Found unpatched CVE (CVE-2007-4460), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/id3lib/3.8.3-r1/temp/cve.log
WARNING: sleep-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/sleep/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: zephyr-echo-client-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zephyr-echo-client/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: freeradius-3.0.21-r0 do_cve_check: Found unpatched CVE (CVE-2002-0318 CVE-2011-4966), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/freeradius/3.0.21-r0/temp/cve.log
WARNING: mongodb-4.4.13-r0 do_cve_check: Found unpatched CVE (CVE-2014-8180 CVE-2017-18381 CVE-2017-2665), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/mongodb/4.4.13-r0/temp/cve.log
WARNING: go-1.17.10-r0 do_cve_check: Found unpatched CVE (CVE-2020-29509 CVE-2020-29511), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/go/1.17.10-r0/temp/cve.log
WARNING: early-sleep-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/early-sleep/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: exiv2-0.27.3-r0 do_cve_check: Found unpatched CVE (CVE-2007-6353 CVE-2021-29623 CVE-2021-31292 CVE-2021-32617 CVE-2021-32815 CVE-2021-34334 CVE-2021-34335 CVE-2021-37615 CVE-2021-37616 CVE-2021-37618 CVE-2021-37619 CVE-2021-37620 CVE-2021-37621 CVE-2021-37622 CVE-2021-37623), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/exiv2/0.27.3-r0/temp/cve.log
WARNING: zephyr-kernel-src-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zephyr-kernel-src/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: gattlib-0.2+gitAUTOINC+fa54ae42cc-r0 do_cve_check: Found unpatched CVE (CVE-2019-6498), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/gattlib/0.2+gitAUTOINC+fa54ae42cc-r0/temp/cve.log
WARNING: context-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/context/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: graphviz-2.50.0-r0 do_cve_check: Found unpatched CVE (CVE-2014-9157), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/graphviz/2.50.0-r0/temp/cve.log
WARNING: emlog-git-r0 do_cve_check: emlog: Failed to compare git <= 5.3.1 for CVE-2019-16868
WARNING: emlog-git-r0 do_cve_check: emlog: Failed to compare git <= 5.3.1 for CVE-2019-17073
WARNING: emlog-git-r0 do_cve_check: emlog: Failed to compare git <= 1.0.7 for CVE-2021-44584
WARNING: emlog-git-r0 do_cve_check: emlog: Failed to compare git <= 1.2.2 for CVE-2022-1526
WARNING: civetweb-1.12+gitAUTOINC+4b440a3399-r0 do_cve_check: Found unpatched CVE (CVE-2019-3821 CVE-2020-27304), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/civetweb/1.12+gitAUTOINC+4b440a3399-r0/temp/cve.log
WARNING: zephyr-websocket-client-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 do_cve_check: Found unpatched CVE (CVE-2021-3322 CVE-2022-1822), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/zephyr-websocket-client/3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0/temp/cve.log
WARNING: spice-0.14.2+gitAUTOINC+7cbd70b931_4fc4c2db36-r0 do_cve_check: Found unpatched CVE (CVE-2016-0749 CVE-2016-2150 CVE-2018-10893 CVE-2021-20201), for more information check /oniroproject-current/build-oniro-linux/tmp/work/core2-64-oniro-linux-musl/spice/0.14.2+gitAUTOINC+7cbd70b931_4fc4c2db36-r0/temp/cve.log
    • Marta Rybczynska changed iteration to Oniro Core Iterations Jul 1, 2022 - Jul 31, 2022

      changed iteration to Oniro Core Iterations Jul 1, 2022 - Jul 31, 2022

    • Marta Rybczynska added to epic &150 (closed)

      added to epic &150 (closed)

    • Marta Rybczynska assigned to @tony3oo3

      assigned to @tony3oo3

    • Marta Rybczynska added Doing label

      added Doing label

    • Davide Gardenal
      Davide Gardenal @tony3oo3 ·
      Reporter

      Upstream patches needed to fix the errors related to PV not comparable:

      Upstream patches to fix wrong product name while checking:

      Upstream patches cleaning up cve-check output:

      Edited by Davide Gardenal
    • Davide Gardenal
      Davide Gardenal @tony3oo3 ·
      Reporter

      After patches result:

      lua-native-5.4.4-r0 (CVE-2022-33099)
curl-native-7.82.0-r0 (CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208)
nasm-native-2.15.05-r0 (CVE-2020-18974)
linux-oniro-5.10.61+gitAUTOINC+3b283fa8d4_452ea6a15e-r0 (CVE-1999-0524 CVE-1999-0656 CVE-2006-2932 CVE-2007-2764 CVE-2007-4998 CVE-2008-2544 CVE-2008-4609 CVE-2010-0298 CVE-2010-4563 CVE-2014-2648 CVE-2014-8171 CVE-2016-0774 CVE-2016-3695 CVE-2016-3699 CVE-2017-1000255 CVE-2017-1000377 CVE-2017-5897 CVE-2017-6264 CVE-2018-1000026 CVE-2018-10840 CVE-2018-10876 CVE-2018-10882 CVE-2018-10901 CVE-2018-10902 CVE-2018-14625 CVE-2018-16880 CVE-2018-16884 CVE-2018-5873 CVE-2018-6559 CVE-2019-10126 CVE-2019-14899 CVE-2019-18910 CVE-2019-3016 CVE-2019-3819 CVE-2019-3846 CVE-2019-3887 CVE-2020-10732 CVE-2020-10742 CVE-2020-16119 CVE-2020-16120 CVE-2020-1749 CVE-2020-25639 CVE-2020-25672 CVE-2020-26558 CVE-2020-27170 CVE-2020-27171 CVE-2020-27820 CVE-2020-35499 CVE-2020-35501 CVE-2020-35508 CVE-2020-8834 CVE-2021-20194 CVE-2021-20226 CVE-2021-20265 CVE-2021-20320 CVE-2021-20321 CVE-2021-20322 CVE-2021-22600 CVE-2021-23133 CVE-2021-23134 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 CVE-2021-28038 CVE-2021-28039 CVE-2021-28375 CVE-2021-28660 CVE-2021-28691 CVE-2021-28714 CVE-2021-28715 CVE-2021-28950 CVE-2021-28951 CVE-2021-28952 CVE-2021-28964 CVE-2021-28971 CVE-2021-28972 CVE-2021-29154 CVE-2021-29155 CVE-2021-29264 CVE-2021-29265 CVE-2021-29266 CVE-2021-29646 CVE-2021-29647 CVE-2021-29648 CVE-2021-29649 CVE-2021-29650 CVE-2021-29657 CVE-2021-30002 CVE-2021-30178 CVE-2021-31829 CVE-2021-31916 CVE-2021-32078 CVE-2021-32399 CVE-2021-33033 CVE-2021-33034 CVE-2021-33200 CVE-2021-33624 CVE-2021-33909 CVE-2021-34556 CVE-2021-34693 CVE-2021-3483 CVE-2021-3501 CVE-2021-35039 CVE-2021-3506 CVE-2021-35477 CVE-2021-3564 CVE-2021-3573 CVE-2021-3609 CVE-2021-3640 CVE-2021-3653 CVE-2021-3655 CVE-2021-3656 CVE-2021-3679 CVE-2021-37159 CVE-2021-3732 CVE-2021-3739 CVE-2021-3744 CVE-2021-3752 CVE-2021-3753 CVE-2021-37576 CVE-2021-3772 CVE-2021-3773 CVE-2021-38160 CVE-2021-38166 CVE-2021-38198 CVE-2021-38199 CVE-2021-38200 CVE-2021-38201 CVE-2021-38202 CVE-2021-38203 CVE-2021-38204 CVE-2021-38205 CVE-2021-38206 CVE-2021-38207 CVE-2021-38208 CVE-2021-38209 CVE-2021-38300 CVE-2021-3847 CVE-2021-4001 CVE-2021-4002 CVE-2021-4023 CVE-2021-4032 CVE-2021-40490 CVE-2021-4083 CVE-2021-4090 CVE-2021-4093 CVE-2021-4095 CVE-2021-41073 CVE-2021-4148 CVE-2021-4149 CVE-2021-4150 CVE-2021-4154 CVE-2021-4157 CVE-2021-41864 CVE-2021-4197 CVE-2021-42008 CVE-2021-4202 CVE-2021-4203 CVE-2021-42252 CVE-2021-42327 CVE-2021-42739 CVE-2021-43057 CVE-2021-43267 CVE-2021-43389 CVE-2021-43975 CVE-2021-43976 CVE-2021-44733 CVE-2021-44879 CVE-2021-45095 CVE-2021-45402 CVE-2021-45469 CVE-2021-45480 CVE-2021-45485 CVE-2021-45486 CVE-2021-45868 CVE-2021-46283 CVE-2022-0185 CVE-2022-0264 CVE-2022-0286 CVE-2022-0322 CVE-2022-0330 CVE-2022-0382 CVE-2022-0433 CVE-2022-0435 CVE-2022-0487 CVE-2022-0492 CVE-2022-0494 CVE-2022-0500 CVE-2022-0516 CVE-2022-0617 CVE-2022-0847 CVE-2022-0854 CVE-2022-0995 CVE-2022-0998 CVE-2022-1011 CVE-2022-1015 CVE-2022-1048 CVE-2022-1055 CVE-2022-1195 CVE-2022-1353 CVE-2022-1462 CVE-2022-1652 CVE-2022-1734 CVE-2022-1786 CVE-2022-1852 CVE-2022-1882 CVE-2022-1998 CVE-2022-2078 CVE-2022-2318 CVE-2022-23222 CVE-2022-24448 CVE-2022-24958 CVE-2022-24959 CVE-2022-25258 CVE-2022-25265 CVE-2022-25375 CVE-2022-26365 CVE-2022-26490 CVE-2022-26878 CVE-2022-26966 CVE-2022-27223 CVE-2022-27666 CVE-2022-27950 CVE-2022-28356 CVE-2022-28388 CVE-2022-28389 CVE-2022-28390 CVE-2022-28796 CVE-2022-28893 CVE-2022-29156 CVE-2022-29581 CVE-2022-29582 CVE-2022-29968 CVE-2022-30594 CVE-2022-32250 CVE-2022-32296 CVE-2022-32981 CVE-2022-33740 CVE-2022-33741 CVE-2022-33742 CVE-2022-33743 CVE-2022-33744 CVE-2022-33981 CVE-2022-34494 CVE-2022-34495 CVE-2022-34918)
qemu-native-6.2.0-r0 (CVE-2019-12067 CVE-2021-20255 CVE-2021-3611 CVE-2021-3750 CVE-2022-35414)
dnsmasq-2.86-r0 (CVE-2021-45951 CVE-2021-45952 CVE-2021-45953 CVE-2021-45954 CVE-2021-45955 CVE-2021-45956 CVE-2021-45957)
ntp-4.2.8p15-r0 (CVE-2019-11331)
zephyr-kernel-test-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
xip-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
zephyr-websocket-client-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
tmux-3.1c-r0 (CVE-2020-27347)
dhrystone-2.1-r0 (CVE-2020-23026)
go-1.17.10-r0 (CVE-2020-29509 CVE-2020-29511)
hdf5-1.8.21-r0 (CVE-2018-17233 CVE-2018-17234 CVE-2018-17237 CVE-2018-17432 CVE-2018-17433 CVE-2018-17434 CVE-2018-17435 CVE-2018-17436 CVE-2018-17437 CVE-2018-17438 CVE-2019-8396 CVE-2020-10809 CVE-2020-10810 CVE-2020-10811 CVE-2020-10812)
proftpd-1.3.7c-r0 (CVE-2001-0027)
xerces-c-3.1.4-r0 (CVE-2018-1311)
procmail-3.22-r0 (CVE-1999-0475 CVE-2014-3618 CVE-2017-16844)
sqlite-2.8.17-r7 (CVE-2015-3414 CVE-2015-3415 CVE-2015-3416 CVE-2015-3717 CVE-2015-5895 CVE-2015-6607 CVE-2016-6153 CVE-2017-10989 CVE-2018-20346 CVE-2018-20505 CVE-2018-20506 CVE-2018-8740 CVE-2019-19645 CVE-2019-19646 CVE-2020-11655 CVE-2020-11656 CVE-2020-13434 CVE-2020-13435 CVE-2020-13630 CVE-2020-13631 CVE-2020-13632 CVE-2020-15358)
gnulib-2018-03-07.03-r0 (CVE-2018-17942)
context-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
exiv2-0.27.3-r0 (CVE-2007-6353 CVE-2021-29623 CVE-2021-31292 CVE-2021-32617 CVE-2021-32815 CVE-2021-34334 CVE-2021-34335 CVE-2021-37615 CVE-2021-37616 CVE-2021-37618 CVE-2021-37619 CVE-2021-37620 CVE-2021-37621 CVE-2021-37622 CVE-2021-37623)
openjpeg-2.4.0-r0 (CVE-2016-9675 CVE-2021-3575)
early-sleep-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
zephyr-mqtt-publisher-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
libtar-1.2.20-r0 (CVE-2013-4420)
zephyr-echo-client-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
redis-7.0-rc3-r0 (CVE-2022-0543)
audiofile-0.3.6-r0 (CVE-2017-6827 CVE-2017-6828 CVE-2017-6829 CVE-2017-6830 CVE-2017-6831 CVE-2017-6832 CVE-2017-6833 CVE-2017-6834 CVE-2017-6835 CVE-2017-6836 CVE-2017-6837 CVE-2017-6838 CVE-2017-6839)
zephyr-http-client-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
vim-9.0.0021-r0 (CVE-2022-2288 CVE-2022-2289 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345)
links-2.25-r0 (CVE-2008-3319)
curl-7.82.0-r0 (CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208)
giflib-5.2.1-r0 (CVE-2022-28506)
gcc-source-6.x.arc-6.x.arc-r0 (CVE-2018-12886 CVE-2019-15847 CVE-2021-37322)
sleep-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
hunspell-1.7.0-r0 (CVE-2019-16707)
nikto-2.1.6-r0 (CVE-2018-11652)
keepalived-2.2.2-r0 (CVE-2021-44225)
interrupt-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
spice-0.14.2+gitAUTOINC+7cbd70b931_4fc4c2db36-r0 (CVE-2021-20201)
nasm-2.15.05-r0 (CVE-2020-18974)
zephyr-coap-client-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
queue-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
freerdp-1_2.6.1-r0 (CVE-2022-24882 CVE-2022-24883)
zephyr-peripheral-esp-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
rsyslog-8.2202.0-r0 (CVE-2015-3243 CVE-2022-24903)
usrsctp-git-r0 (CVE-2019-20503)
zsh-5.8-r0 (CVE-2021-45444)
device-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
libtorrent-0.13.8-r0 (CVE-2016-5301)
ez-ipupdate-3.0.11b7-r0 (CVE-2003-0887)
p7zip-16.02-r0 (CVE-2016-9296 CVE-2018-5996)
generate-zephyr-machines-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
qemu-6.2.0-r0 (CVE-2019-12067 CVE-2021-20255 CVE-2021-3611 CVE-2021-3750 CVE-2022-35414)
pending-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
wavpack-4.60.1-r0 (CVE-2016-10169 CVE-2016-10170 CVE-2016-10171 CVE-2016-10172 CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841 CVE-2019-1010315 CVE-2019-1010317 CVE-2019-1010319 CVE-2019-11498)
common-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
zlog-1.2.15-r0 (CVE-2021-43521)
db-1_5.3.28-r1 (CVE-2015-2583 CVE-2015-2624 CVE-2015-2626 CVE-2015-2640 CVE-2015-2654 CVE-2015-2656 CVE-2015-4754 CVE-2015-4764 CVE-2015-4774 CVE-2015-4775 CVE-2015-4776 CVE-2015-4777 CVE-2015-4778 CVE-2015-4779 CVE-2015-4780 CVE-2015-4781 CVE-2015-4782 CVE-2015-4783 CVE-2015-4784 CVE-2015-4785 CVE-2015-4786 CVE-2015-4787 CVE-2015-4788 CVE-2015-4789 CVE-2015-4790 CVE-2016-0682 CVE-2016-0689 CVE-2016-0692 CVE-2016-0694 CVE-2016-3418 CVE-2020-2981)
zephyr-coap-server-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
smarty-4.1.0-r0 (CVE-2020-10375 CVE-2022-29221)
civetweb-1.12+gitAUTOINC+4b440a3399-r0 (CVE-2019-3821 CVE-2020-27304)
gnupg-2.3.4-r0 (CVE-2022-34903)
memcached-1.6.15-r0 (CVE-2022-26635)
gattlib-0.2+gitAUTOINC+fa54ae42cc-r0 (CVE-2019-6498)
dovecot-2.3.14-r0 (CVE-2020-28200 CVE-2021-29157 CVE-2021-33515)
quagga-1.2.4-r0 (CVE-2017-3224 CVE-2021-44038)
samba-4.14.13-r0 (CVE-2021-23192 CVE-2021-44141)
usbredir-0.9.0-r0 (CVE-2021-3700)
id3lib-3.8.3-r1 (CVE-2007-4460)
imagemagick-7.0.10-62-r0 (CVE-2007-1667 CVE-2014-9804 CVE-2014-9805 CVE-2014-9806 CVE-2014-9807 CVE-2014-9808 CVE-2014-9809 CVE-2014-9810 CVE-2014-9811 CVE-2014-9812 CVE-2014-9813 CVE-2014-9814 CVE-2014-9815 CVE-2014-9816 CVE-2014-9817 CVE-2014-9818 CVE-2014-9819 CVE-2014-9820 CVE-2014-9821 CVE-2014-9822 CVE-2014-9823 CVE-2014-9824 CVE-2014-9825 CVE-2014-9826 CVE-2014-9827 CVE-2014-9828 CVE-2014-9829 CVE-2014-9830 CVE-2014-9831 CVE-2014-9848 CVE-2014-9852 CVE-2014-9853 CVE-2014-9854 CVE-2014-9907 CVE-2016-10062 CVE-2016-10144 CVE-2016-10145 CVE-2016-10146 CVE-2016-7513 CVE-2016-7514 CVE-2016-7515 CVE-2016-7516 CVE-2016-7517 CVE-2016-7518 CVE-2016-7519 CVE-2016-7520 CVE-2016-7521 CVE-2016-7522 CVE-2016-7523 CVE-2016-7524 CVE-2016-7525 CVE-2016-7526 CVE-2016-7527 CVE-2016-7528 CVE-2016-7529 CVE-2016-7530 CVE-2016-7531 CVE-2016-7532 CVE-2016-7533 CVE-2016-7534 CVE-2016-7535 CVE-2016-7536 CVE-2016-7537 CVE-2016-7538 CVE-2017-5506 CVE-2017-5509 CVE-2017-5510 CVE-2017-5511 CVE-2021-20309 CVE-2021-20310 CVE-2021-20311 CVE-2021-20312 CVE-2021-20313 CVE-2021-3610 CVE-2022-1114)
influxdb-1.8.10-r0 (CVE-2019-10329)
pidgin-2.14.2-r0 (CVE-2022-26491)
zephyr-kernel-test-twister-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
zephyr-peripheral-hr-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
cifs-utils-6.14-r0 (CVE-2022-27239 CVE-2022-29869)
zephyr-kernel-src-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
tcpreplay-4.4.1-r0 (CVE-2022-25484 CVE-2022-27416 CVE-2022-27418 CVE-2022-27939 CVE-2022-27940 CVE-2022-27941 CVE-2022-27942 CVE-2022-28487)
libass-0.14.0-r0 (CVE-2020-26682)
bind-9.18.2-r0 (CVE-2022-1183)
openflow-1.0+gitAUTOINC+c84f33f09d-r0 (CVE-2015-1611 CVE-2015-1612 CVE-2018-1000155)
zephyr-helloworld-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
strace-5.16-r0 (CVE-2000-0006)
lua-5.4.4-r0 (CVE-2022-33099)
zephyr-philosophers-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
uw-imap-2007f-r0 (CVE-2018-19518)
poll-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
zephyr-blinky-3.0.0+gitAUTOINC+4f8d78ceeb_b0612c97c1-r0 (CVE-2021-3322 CVE-2022-1822)
    • Davide Gardenal closed

      closed

    • Marta Rybczynska removed Doing label

      removed Doing label

    Please register or sign in to reply

    Copyright © Eclipse Foundation, Inc. All Rights Reserved.     Privacy Policy | Terms of Use | Copyright Agent