diff mbox series

[wrynose,03/52] python3-setuptools: set status for CVE-2024-6345

Message ID 0e2a61f133d5d9a3eb04bad9c4179dd3510b8e85.1778198557.git.yoann.congal@smile.fr
State New
Headers show
Series [wrynose,01/52] shadow: set CVE_PRODUCT | expand

Commit Message

Yoann Congal May 8, 2026, 7:10 a.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

Current version of sbom-cve-check reports this for some reason.
NVD does not have CPE and cvelistV5 ([1]) says "lessThan": "70.0".

[1] https://github.com/CVEProject/cvelistV5/blob/main/cves/2024/6xxx/CVE-2024-6345.json

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8d03ae7b6e25c4ef3953c3fe49ca0c939296d222)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 meta/recipes-devtools/python/python3-setuptools_82.0.1.bb | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/meta/recipes-devtools/python/python3-setuptools_82.0.1.bb b/meta/recipes-devtools/python/python3-setuptools_82.0.1.bb
index a3943a29c39..c413578faf5 100644
--- a/meta/recipes-devtools/python/python3-setuptools_82.0.1.bb
+++ b/meta/recipes-devtools/python/python3-setuptools_82.0.1.bb
@@ -49,3 +49,5 @@  BBCLASSEXTEND = "native nativesdk"
 # This used to use the bootstrap install which didn't compile. Until we bump the
 # tmpdir version we can't compile the native otherwise the sysroot unpack fails
 INSTALL_WHEEL_COMPILE_BYTECODE:class-native = "--no-compile-bytecode"
+
+CVE_STATUS[CVE-2024-6345] = "fixed-version: fixed since 70.0"