[meta-oe,02/11] opensc: mark CVE-2024-8443 as fixed

Message ID	20241220153629.2499631-3-peter.marko@siemens.com
State	Under Review
Headers	show Return-Path: <peter.marko@siemens.com> ip: 185.136.65.226, mailfrom: fm-256628-20241220153731b33e22069866c12544-gdnutd@rts-flowmailer.siemens.com) From: Peter Marko <peter.marko@siemens.com> To: openembedded-devel@lists.openembedded.org Cc: Peter Marko <peter.marko@siemens.com> Subject: [meta-oe][PATCH 02/11] opensc: mark CVE-2024-8443 as fixed Date: Fri, 20 Dec 2024 16:36:20 +0100 Message-Id: <20241220153629.2499631-3-peter.marko@siemens.com> In-Reply-To: <20241220153629.2499631-1-peter.marko@siemens.com> References: <20241220153629.2499631-1-peter.marko@siemens.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Feedback-ID: 519:519-256628:519-21489:flowmailer
Series	upgrade recipes to solve CVEs \| expand [meta-oe,00/11] upgrade recipes to solve CVEs [meta-oe,01/11] opensc: upgrade 0.25.1 -> 0.26.0 [meta-oe,02/11] opensc: mark CVE-2024-8443 as fixed [meta-oe,03/11] memcached: add UPSTREAM_CHECK_URI [meta-oe,04/11] memcached: upgrade 1.6.17 -> 1.6.33 [meta-oe,05/11] php: upgrade 8.2.20 -> 8.2.26 [meta-oe,06/11] libmemcached: remove recipe for version 1.0.7 [meta-oe,07/11] libmemcached: merge inc into bb [meta-oe,08/11] libmemcached: ignore CVE-2023-27478 [meta-oe,09/11] sassc: ignore CVE-2022-43357 [meta-oe,10/11] wireshark: upgrade 4.2.8 -> 4.2.9 [meta-oe,11/11] weechat: upgrade 4.0.4 -> 4.5.0

Message ID

20241220153629.2499631-3-peter.marko@siemens.com

State

Under Review

Headers

From: Peter Marko <peter.marko@siemens.com>
To: openembedded-devel@lists.openembedded.org
Cc: Peter Marko <peter.marko@siemens.com>
Subject: [meta-oe][PATCH 02/11] opensc: mark CVE-2024-8443 as fixed
Date: Fri, 20 Dec 2024 16:36:20 +0100
Message-Id: <20241220153629.2499631-3-peter.marko@siemens.com>
In-Reply-To: <20241220153629.2499631-1-peter.marko@siemens.com>
References: <20241220153629.2499631-1-peter.marko@siemens.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Feedback-ID: 519:519-256628:519-21489:flowmailer

Series

upgrade recipes to solve CVEs | expand

Commit Message

Marko, Peter Dec. 20, 2024, 3:36 p.m. UTC

From: Peter Marko <peter.marko@siemens.com>

NVD tracks this CVE as version-less.
Per [1] this is fixed by following commits:

$ git tag --contains b28a3cef416fcfb92fbb9ea7fd3c71df52c6c9fc
0.26.0
0.26.0-rc1
$ git tag --contains 02e847458369c08421fd2d5e9a16a5f272c2de9e
0.26.0
0.26.0-rc1

[1] https://github.com/OpenSC/OpenSC/wiki/CVE-2024-8443

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta-oe/recipes-support/opensc/opensc_0.26.0.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-oe/recipes-support/opensc/opensc_0.26.0.bb b/meta-oe/recipes-support/opensc/opensc_0.26.0.bb
index 3e4d476ff4..bd44e24aeb 100644
--- a/meta-oe/recipes-support/opensc/opensc_0.26.0.bb
+++ b/meta-oe/recipes-support/opensc/opensc_0.26.0.bb
@@ -14,6 +14,8 @@  DEPENDS = "openssl"
 SRCREV = "fe857cc4c68da4873071f168c9aaf9860040ff4e"
 SRC_URI = "git://github.com/OpenSC/OpenSC;branch=master;protocol=https"
 
+CVE_STATUS[CVE-2024-8443] = "fixed-version: this is fixed since 0.26.0"
+
 S = "${WORKDIR}/git"
 
 inherit autotools pkgconfig bash-completion

[meta-oe,02/11] opensc: mark CVE-2024-8443 as fixed

Commit Message

Patch