CVE-check will scan for vulnerabilities on the images and on the codes. This is added in the file in ‘project-spec/meta-user/conf/petalinuxbsp.conf’ and see all the packages are scanned under task 'do_cve_check’ but also see the below warning.
WARNING: cve-check-tool-native-5.6.4-r0 do_populate_cve_db: Error in executing cve-check-update
build/build.log.old:WARNING: cve-check-tool-native-5.6.4-r0 do_populate_cve_db: Failed to update cve-check-tool database, CVEs won’t be checked
Since in 2018.3 the above warning was observed, we have also tried this in different petalinux versions and facing some other errors.
For further product inquiries, please get in touch with our sales team at mktg@iwave-global.com
Please find the detailed product information here:
Zynq™ UltraScale+™ ZU19/ZU17/ZU11 MPSoC System on Module