https://toorun.dev/tags/cve/Recent content in cve on toorun.devHugo -- gohugo.ioen-usSun, 20 Sep 2026 10:00:00 +0000https://toorun.dev/posts/yocto-cve-vulnerability-check-package-inventory/Sun, 20 Sep 2026 10:00:00 +0000https://toorun.dev/posts/yocto-cve-vulnerability-check-package-inventory/How to Check CVEs and Vulnerabilities in a Yocto Image Yocto can check known CVEs for the recipes used to build an image. The useful workflow is: Enable the Yocto CVE checker. Build the image and read the generated report. Record the package version, CVE, status, and fix. Verify the final device image separately. 1) Enable CVE checking Add this to build/conf/local.conf: INHERIT += "cve-check" # Optional: fail the build when an unresolved CVE is found.