From patchwork Thu Dec 19 20:48:49 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Marko, Peter" X-Patchwork-Id: 1386 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 694D9E77184 for ; Thu, 19 Dec 2024 20:49:56 +0000 (UTC) Received: from mta-65-225.siemens.flowmailer.net (mta-65-225.siemens.flowmailer.net [185.136.65.225]) by mx.groups.io with SMTP id smtpd.web11.138535.1734641393101270554 for ; Thu, 19 Dec 2024 12:49:54 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=A/1so+V2; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.225, mailfrom: fm-256628-20241219204950f9f8f89825cec2a0df-gjx_l1@rts-flowmailer.siemens.com) Received: by mta-65-225.siemens.flowmailer.net with ESMTPSA id 20241219204950f9f8f89825cec2a0df for ; Thu, 19 Dec 2024 21:49:50 +0100 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc; bh=TIVs6o34LZZncOKiGjQFRqDrhK+uhtZgd/HGh0EcKPQ=; b=A/1so+V289LDH5e2hgN9I3vIu6cc3uISssM4Bbzmfwtqp1f9S4TKmZCj+Ushw/TauxO48H oSt1+d7l4HuvnUSLoyENQfRv7jKh7WoAhT2vDQHCiV/YjuJSc+B9PfTpd3j7bD+melkZZyaz DcJ+xzDlFKdHXL5q0eDlvq0GL3VewBAm0wcyCv/ldJ2mqFhTk0Dld+OStcQ+w3e9ERkq76qW 6iaUgGuT6B36sVWgfVx8qRE65h/EEDtibR7zXutbQ1iWfGKC2ZIFyvtR4Q+G2iwZYn3bHLnc zt6TKXqvHPyKrZbuC7/woIqAX7GBO+HtWX0yJ8A4TMjJvNWL+BsBXIlw==; From: Peter Marko To: openembedded-devel@lists.openembedded.org Cc: Peter Marko Subject: [meta-oe][PATCH v2 00/12] ignore or mark fixed several CVEs Date: Thu, 19 Dec 2024 21:48:49 +0100 Message-Id: <20241219204901.347009-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 19 Dec 2024 20:49:56 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/114416 This series handles all CVEs in meta-openembedded master report which I think that can be removed from reports without doing an upgrade or patch. Peter Marko (12): ace: ignore CVE-2009-1147 apache2: ignore CVE-1999-0678 and CVE-1999-1412 apache2: remove old version references from CVEs spice: ignore CVE-2016-0749 gattlib: mark CVE-2019-6498 as fixed monkey: ignore CVE-2013-1771 redis: ignore CVE-2022-0543 spice-gtk: mark CVE-2012-4425 as fixed apache2: ignore disputed CVE CVE-2007-0086 swagger-ui: mark CVE-2016-1000229 as fixed memcached: ignore disputed CVE-2022-26635 emlog: set CVE_PRODUCT .../memcached/memcached_1.6.17.bb | 2 ++ .../recipes-support/spice/spice-gtk_0.42.bb | 2 ++ .../recipes-support/spice/spice_git.bb | 1 + meta-oe/recipes-connectivity/ace/ace_8.0.1.bb | 2 ++ .../recipes-connectivity/gattlib/gattlib_git.bb | 2 ++ meta-oe/recipes-core/emlog/emlog.inc | 2 ++ meta-oe/recipes-extended/redis/redis_7.2.6.bb | 1 + .../swagger-ui/swagger-ui_5.18.2.bb | 2 ++ .../recipes-httpd/apache2/apache2_2.4.62.bb | 17 ++++++++++------- .../recipes-httpd/monkey/monkey_1.6.9.bb | 1 + 10 files changed, 25 insertions(+), 7 deletions(-)