Re: [yocto] [security-discussions] yocto-security-tools: helper scripts for CVE backporting work

Daniel Turull <[email protected]> Tue, 21 Jul 2026 11:29:01 +0000
Newsgroups org.yoctoproject.lists.yocto
Message-ID <[email protected]>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