[langdale,05/27] shadow: ignore CVE-2016-15024

Message ID	8dce0c01d9a0f6855e6a70a65412a43208b034a8.1678401759.git.steve@sakoman.com
State	New
Headers	show Return-Path: <steve@sakoman.com> ip: 209.85.210.175, mailfrom: steve@sakoman.com) From: Steve Sakoman <steve@sakoman.com> To: openembedded-core@lists.openembedded.org Subject: [OE-core][langdale 05/27] shadow: ignore CVE-2016-15024 Date: Thu, 9 Mar 2023 12:57:40 -1000 Message-Id: <8dce0c01d9a0f6855e6a70a65412a43208b034a8.1678401759.git.steve@sakoman.com> In-Reply-To: <cover.1678401759.git.steve@sakoman.com> References: <cover.1678401759.git.steve@sakoman.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[langdale,01/27] tiff: fix multiple CVEs \| expand [langdale,01/27] tiff: fix multiple CVEs [langdale,02/27] libxml2: Fix CVE-2022-40303 && CVE-2022-40304 [langdale,03/27] qemu: Fix CVE-2022-4144 [langdale,04/27] epiphany: Security fix for CVE-2023-26081 [langdale,05/27] shadow: ignore CVE-2016-15024 [langdale,06/27] cve-extra-exclusions: ignore inapplicable linux-yocto CVEs [langdale,07/27] linux-yocto/5.15: update to v5.15.94 [langdale,08/27] linux-yocto/5.15: update to v5.15.96 [langdale,09/27] linux-yocto-rt/5.15: update to -rt59 [langdale,10/27] iso-codes: upgrade 4.12.0 -> 4.13.0 [langdale,11/27] libmicrohttpd: upgrade 0.9.75 -> 0.9.76 [langdale,12/27] binutils: Fix nativesdk ld.so search [langdale,13/27] devtool: ignore patch-fuzz errors when extracting source [langdale,14/27] u-boot: Map arm64 into map for u-boot dts installation [langdale,15/27] oeqa/selftest/prservice: Improve debug output for failure [langdale,16/27] ffmpeg: fix build failure when vulkan is enabled [langdale,17/27] systemd: add group sgx to udev package [langdale,18/27] vim: add missing pkgconfig inherit [langdale,19/27] mesa-demos: packageconfig weston should have a dependency on wayland-protocols [langdale,20/27] libcomps: Fix callback function prototype for PyCOMPS_hash [langdale,21/27] rpm: Fix hdr_hash function prototype [langdale,22/27] meson: Fix wrapper handling of implicit setup command [langdale,23/27] oeqa/sdk: Improve Meson test [langdale,24/27] linux: inherit pkgconfig in kernel.bbclass [langdale,25/27] staging: Separate out different multiconfig manifests [langdale,26/27] lua: Fix install conflict when enable multilib. [langdale,27/27] vala: Fix install conflict when enable multilib.

Message ID

8dce0c01d9a0f6855e6a70a65412a43208b034a8.1678401759.git.steve@sakoman.com

State

New

Headers

From: Steve Sakoman <steve@sakoman.com>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][langdale 05/27] shadow: ignore CVE-2016-15024
Date: Thu,  9 Mar 2023 12:57:40 -1000
Message-Id: 
 <8dce0c01d9a0f6855e6a70a65412a43208b034a8.1678401759.git.steve@sakoman.com>
In-Reply-To: <cover.1678401759.git.steve@sakoman.com>
References: <cover.1678401759.git.steve@sakoman.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[langdale,01/27] tiff: fix multiple CVEs | expand

Commit Message

Steve Sakoman March 9, 2023, 10:57 p.m. UTC

From: Ross Burton <ross.burton@arm.com>

This recently got an updated CPE which matches this recipe, but the issue
is related to an entirely different shadow project so ignore it.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 2331e98abb09cbcd56625d65c4e5d258dc29dd04)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
 meta/recipes-extended/shadow/shadow_4.12.3.bb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/meta/recipes-extended/shadow/shadow_4.12.3.bb b/meta/recipes-extended/shadow/shadow_4.12.3.bb
index 40b11345c9..d1a3fd5593 100644
--- a/meta/recipes-extended/shadow/shadow_4.12.3.bb
+++ b/meta/recipes-extended/shadow/shadow_4.12.3.bb
@@ -9,3 +9,6 @@  BBCLASSEXTEND = "native nativesdk"
 # Severity is low and marked as closed and won't fix.
 # https://bugzilla.redhat.com/show_bug.cgi?id=884658
 CVE_CHECK_IGNORE += "CVE-2013-4235"
+
+# This is an issue for a different shadow
+CVE_CHECK_IGNORE += "CVE-2016-15024"

[langdale,05/27] shadow: ignore CVE-2016-15024

Commit Message

Patch