diff mbox series

[kirkstone,2/5] rust: ignore CVE-2024-43402

Message ID 62bb1b8f89c97fa32a7b15021e9e3fbbb878ae68.1728490465.git.steve@sakoman.com
State Accepted, archived
Commit 62bb1b8f89c97fa32a7b15021e9e3fbbb878ae68
Delegated to: Steve Sakoman
Headers show
Series [kirkstone,1/5] cups: Backport fix for CVE-2024-47175 | expand

Commit Message

Steve Sakoman Oct. 9, 2024, 4:16 p.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

This CVE iwas created because fix for CVE-2024-24576 was incomplete.
Ignore the new CVE in the same way as the old one.

See https://nvd.nist.gov/vuln/detail/CVE-2024-43402

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
 meta/recipes-devtools/rust/rust-source.inc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
diff mbox series

Patch

diff --git a/meta/recipes-devtools/rust/rust-source.inc b/meta/recipes-devtools/rust/rust-source.inc
index c377a680a7..fc22b9990c 100644
--- a/meta/recipes-devtools/rust/rust-source.inc
+++ b/meta/recipes-devtools/rust/rust-source.inc
@@ -6,5 +6,5 @@  RUSTSRC = "${WORKDIR}/rustc-${PV}-src"
 UPSTREAM_CHECK_URI = "https://forge.rust-lang.org/infra/other-installation-methods.html"
 UPSTREAM_CHECK_REGEX = "rustc-(?P<pver>\d+(\.\d+)+)-src"
 
-#CVE-2024-24576 is specific to Microsoft Windows
-CVE_CHECK_IGNORE += "CVE-2024-24576"
+# These CVEs are specific to Microsoft Windows
+CVE_CHECK_IGNORE += "CVE-2024-24576 CVE-2024-43402"