[scarthgap,01/17] grub: drop obsolete CVE statuses

Message ID	20250311181725.8986-1-peter.marko@siemens.com
State	Under Review
Delegated to:	Steve Sakoman
Headers	show Return-Path: <peter.marko@siemens.com> ip: 185.136.65.226, mailfrom: fm-256628-20250311181834c4d4666ef843cc01ad-tailal@rts-flowmailer.siemens.com) From: Peter Marko <peter.marko@siemens.com> To: openembedded-core@lists.openembedded.org Cc: Peter Marko <peter.marko@siemens.com> Subject: [OE-core][scarthgap][PATCH 01/17] grub: drop obsolete CVE statuses Date: Tue, 11 Mar 2025 19:17:09 +0100 Message-Id: <20250311181725.8986-1-peter.marko@siemens.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Feedback-ID: 519:519-256628:519-21489:flowmailer
Series	[scarthgap,01/17] grub: drop obsolete CVE statuses \| expand [scarthgap,01/17] grub: drop obsolete CVE statuses [scarthgap,02/17] grub: backport strlcpy function [scarthgap,03/17] grup: patch CVE-2024-45781 [scarthgap,04/17] grub: patch CVE-2024-45782 and CVE-2024-56737 [scarthgap,05/17] grub: patch CVE-2024-45780 [scarthgap,06/17] grub: patch CVE-2024-45783 [scarthgap,07/17] grub: patch CVE-2025-0624 [scarthgap,08/17] grub: patch CVE-2024-45774 [scarthgap,09/17] grub: patch CVE-2024-45775 [scarthgap,10/17] grub: patch CVE-2025-0622 [scarthgap,11/17] grub: patch CVE-2024-45776 [scarthgap,12/17] grub: patch CVE-2024-45777 [scarthgap,13/17] grub: patch CVE-2025-0690 [scarthgap,14/17] grub: patch CVE-2025-1118 [scarthgap,15/17] grub: patch CVE-2024-45778 and CVE-2024-45779 [scarthgap,16/17] grub: patch CVE-2025-0677, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686 and CVE-20… [scarthgap,17/17] grub: patch CVE-2025-0678 and CVE-2025-1125

Message ID

20250311181725.8986-1-peter.marko@siemens.com

State

Under Review

Delegated to:

Steve Sakoman

Headers

From: Peter Marko <peter.marko@siemens.com>
To: openembedded-core@lists.openembedded.org
Cc: Peter Marko <peter.marko@siemens.com>
Subject: [OE-core][scarthgap][PATCH 01/17] grub: drop obsolete CVE statuses
Date: Tue, 11 Mar 2025 19:17:09 +0100
Message-Id: <20250311181725.8986-1-peter.marko@siemens.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Feedback-ID: 519:519-256628:519-21489:flowmailer

Series

[scarthgap,01/17] grub: drop obsolete CVE statuses | expand

Commit Message

Peter Marko March 11, 2025, 6:17 p.m. UTC

From: Peter Marko <peter.marko@siemens.com>

CVE-2021-46705 was needed only with 2.06
CVE-2023-4692 and CVE-2023-4693 were fixed in NVD DB meanwhile

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta/recipes-bsp/grub/grub2.inc | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/meta/recipes-bsp/grub/grub2.inc b/meta/recipes-bsp/grub/grub2.inc
index 54c0e9bdd5..c160d15717 100644
--- a/meta/recipes-bsp/grub/grub2.inc
+++ b/meta/recipes-bsp/grub/grub2.inc
@@ -24,11 +24,8 @@  SRC_URI = "${GNU_MIRROR}/grub/grub-${PV}.tar.gz \
 SRC_URI[sha256sum] = "b30919fa5be280417c17ac561bb1650f60cfb80cc6237fa1e2b6f56154cb9c91"
 
 CVE_STATUS[CVE-2019-14865] = "not-applicable-platform: applies only to RHEL"
-CVE_STATUS[CVE-2021-46705] = "not-applicable-platform: Applies only to SUSE"
 CVE_STATUS[CVE-2023-4001]  = "not-applicable-platform: Applies only to RHEL/Fedora"
 CVE_STATUS[CVE-2024-1048]  = "not-applicable-platform: Applies only to RHEL/Fedora"
-CVE_STATUS[CVE-2023-4692]  = "cpe-incorrect: Fixed in version 2.12 already"
-CVE_STATUS[CVE-2023-4693]  = "cpe-incorrect: Fixed in version 2.12 already"
 
 DEPENDS = "flex-native bison-native gettext-native"

[scarthgap,01/17] grub: drop obsolete CVE statuses

Commit Message

Patch