[kirkstone,1/5] cpio: ignore CVE-2023-7216

Message ID	20241201185337.2675566-2-peter.marko@siemens.com
State	Under Review
Delegated to:	Steve Sakoman
Headers	show Return-Path: <peter.marko@siemens.com> ip: 185.136.64.226, mailfrom: fm-256628-202412011854277d574fba67380ea0d7-uifzzp@rts-flowmailer.siemens.com) From: Peter Marko <peter.marko@siemens.com> To: openembedded-core@lists.openembedded.org Cc: Peter Marko <peter.marko@siemens.com> Subject: [OE-core][kirkstone][PATCH 1/5] cpio: ignore CVE-2023-7216 Date: Sun, 1 Dec 2024 19:53:33 +0100 Message-Id: <20241201185337.2675566-2-peter.marko@siemens.com> In-Reply-To: <20241201185337.2675566-1-peter.marko@siemens.com> References: <20241201185337.2675566-1-peter.marko@siemens.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Feedback-ID: 519:519-256628:519-21489:flowmailer
Series	CVE list cleanup \| expand [kirkstone,0/5] CVE list cleanup [kirkstone,1/5] cpio: ignore CVE-2023-7216 [kirkstone,2/5] gnupg: ignore CVE-2022-3515 [kirkstone,3/5] qemu: ignore CVE-2022-36648 [kirkstone,4/5] grub: ignore CVE-2024-1048 and CVE-2023-4001 [kirkstone,5/5] pixman: ignore CVE-2023-37769

Message ID

20241201185337.2675566-2-peter.marko@siemens.com

State

Under Review

Delegated to:

Steve Sakoman

Headers

From: Peter Marko <peter.marko@siemens.com>
To: openembedded-core@lists.openembedded.org
Cc: Peter Marko <peter.marko@siemens.com>
Subject: [OE-core][kirkstone][PATCH 1/5] cpio: ignore CVE-2023-7216
Date: Sun,  1 Dec 2024 19:53:33 +0100
Message-Id: <20241201185337.2675566-2-peter.marko@siemens.com>
In-Reply-To: <20241201185337.2675566-1-peter.marko@siemens.com>
References: <20241201185337.2675566-1-peter.marko@siemens.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Feedback-ID: 519:519-256628:519-21489:flowmailer

Series

CVE list cleanup | expand

Commit Message

Marko, Peter Dec. 1, 2024, 6:53 p.m. UTC

From: Peter Marko <peter.marko@siemens.com>

Same was done in newer Yocto releases.
See commit See commit 0f2cd2bbaddba3b8c80d71db274bbcd941d0e60e

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta/recipes-extended/cpio/cpio_2.14.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-extended/cpio/cpio_2.14.bb b/meta/recipes-extended/cpio/cpio_2.14.bb
index c0b97ee166..0fbab82cca 100644
--- a/meta/recipes-extended/cpio/cpio_2.14.bb
+++ b/meta/recipes-extended/cpio/cpio_2.14.bb
@@ -16,6 +16,8 @@  inherit autotools gettext texinfo
 
 # Issue applies to use of cpio in SUSE/OBS, doesn't apply to us
 CVE_CHECK_IGNORE += "CVE-2010-4226"
+# disputed: intended behaviour, see https://lists.gnu.org/archive/html/bug-cpio/2024-03/msg00000.html
+CVE_CHECK_IGNORE += "CVE-2023-7216"
 
 EXTRA_OECONF += "DEFAULT_RMT_DIR=${sbindir}"

[kirkstone,1/5] cpio: ignore CVE-2023-7216

Commit Message

Patch