[kirkstone,09/24] grub: ignore CVE-2024-2312

Message ID	dc10bf2f9dd91cbd34af43162b61736fc26aa314.1760038088.git.steve@sakoman.com
State	New
Headers	show Return-Path: <steve@sakoman.com> ip: 209.85.210.170, mailfrom: steve@sakoman.com) From: Steve Sakoman <steve@sakoman.com> To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 09/24] grub: ignore CVE-2024-2312 Date: Thu, 9 Oct 2025 12:30:53 -0700 Message-ID: <dc10bf2f9dd91cbd34af43162b61736fc26aa314.1760038088.git.steve@sakoman.com> In-Reply-To: <cover.1760038088.git.steve@sakoman.com> References: <cover.1760038088.git.steve@sakoman.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[kirkstone,01/24] libxml2: fix CVE-2025-9714 \| expand [kirkstone,01/24] libxml2: fix CVE-2025-9714 [kirkstone,02/24] gstreamer1.0-plugins-bad: Fix CVE-2025-3887 [kirkstone,03/24] busybox: patch CVE-2025-46394 [kirkstone,04/24] libxslt: Patch for CVE-2025-7424 [kirkstone,05/24] tiff: Fix CVE-2025-8961 [kirkstone,06/24] tiff: Fix CVE-2025-9165 [kirkstone,07/24] gstreamer1.0: ignore CVEs fixed in plugins [kirkstone,08/24] gstreamer1.0: ignore CVE-2025-2759 [kirkstone,09/24] grub: ignore CVE-2024-2312 [kirkstone,10/24] ghostscript: patch CVE-2025-59798 [kirkstone,11/24] ghostscript: patch CVE-2025-59799 [kirkstone,12/24] ghostscript: patch CVE-2025-59800 [kirkstone,13/24] pulseaudio: ignore CVE-2024-11586 [kirkstone,14/24] ffmpeg: ignore CVE-2023-6603 [kirkstone,15/24] ffmpeg: mark CVE-2023-6601 as patched [kirkstone,16/24] go: fix CVE-2025-47906 [kirkstone,17/24] scripts/install-buildtools: Update to 4.0.30 [kirkstone,18/24] openssl: upgrade 3.0.17 -> 3.0.18 [kirkstone,19/24] glibc: stable 2.35 branch updates [kirkstone,20/24] systemd: backport fix for handle USE_NLS from master [kirkstone,21/24] p11-kit: backport fix for handle USE_NLS from master [kirkstone,22/24] conf/bitbake.conf: use gnu mirror instead of main server [kirkstone,23/24] selftest/cases/meta_ide.py: use use gnu mirror instead of main server [kirkstone,24/24] oeqa/sdk/cases/buildcpio.py: use gnu mirror instead of main server

Message ID

dc10bf2f9dd91cbd34af43162b61736fc26aa314.1760038088.git.steve@sakoman.com

State

New

Headers

From: Steve Sakoman <steve@sakoman.com>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][kirkstone 09/24] grub: ignore CVE-2024-2312
Date: Thu,  9 Oct 2025 12:30:53 -0700
Message-ID: 
 <dc10bf2f9dd91cbd34af43162b61736fc26aa314.1760038088.git.steve@sakoman.com>
In-Reply-To: <cover.1760038088.git.steve@sakoman.com>
References: <cover.1760038088.git.steve@sakoman.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[kirkstone,01/24] libxml2: fix CVE-2025-9714 | expand

Commit Message

Steve Sakoman Oct. 9, 2025, 7:30 p.m. UTC

From: Peter Marko <peter.marko@siemens.com>

This CVE is specific to Ubuntu [1].

[1] https://bugs.launchpad.net/ubuntu/+source/grub2-unsigned/+bug/2054127

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
 meta/recipes-bsp/grub/grub2.inc | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-bsp/grub/grub2.inc b/meta/recipes-bsp/grub/grub2.inc
index 1b019752b7..94eeadfb99 100644
--- a/meta/recipes-bsp/grub/grub2.inc
+++ b/meta/recipes-bsp/grub/grub2.inc
@@ -70,6 +70,8 @@  CVE_CHECK_IGNORE += "CVE-2019-14865"
 CVE_CHECK_IGNORE += "CVE-2021-46705"
 # not-applicable-platform: Applies only to RHEL/Fedora
 CVE_CHECK_IGNORE += "CVE-2024-1048 CVE-2023-4001"
+# not-applicable-platform: Applies only to Ubuntu
+CVE_CHECK_IGNORE += "CVE-2024-2312"
 
 DEPENDS = "flex-native bison-native gettext-native"

[kirkstone,09/24] grub: ignore CVE-2024-2312

Commit Message

Patch