[meta-oe,walnascar,14/21] php: ignore CVE-2024-3566

Message ID	20250927063216.1865627-15-ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.166.180, mailfrom: ankur.tyagi85@gmail.com) From: Ankur Tyagi <ankur.tyagi85@gmail.com> To: openembedded-devel@lists.openembedded.org Cc: Jeroen Hofstee <jhofstee@victronenergy.com>, Khem Raj <raj.khem@gmail.com>, Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [oe][meta-oe][walnascar][PATCH 14/21] php: ignore CVE-2024-3566 Date: Sat, 27 Sep 2025 18:32:09 +1200 Message-ID: <20250927063216.1865627-15-ankur.tyagi85@gmail.com> In-Reply-To: <20250927063216.1865627-1-ankur.tyagi85@gmail.com> References: <20250927063216.1865627-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	Trying to keep recipes in the walnascar branch updated with useful fixes from the master branch. \| expand [meta-oe,walnascar,00/21] Trying to keep recipes in the walnascar branch updated with useful fixes … [meta-oe,walnascar,01/21] gensio: upgrade 2.8.7 -> 2.8.15 [meta-oe,walnascar,02/21] hostapd: enable 802.11be, SAE-PK, OWE, SuiteB, ACS, and MBO support [meta-oe,walnascar,03/21] hostapd: Backport a patch to build SAE-PK correctly [meta-oe,walnascar,04/21] libimobiledevice-glue: upgrade 1.3.1 -> 1.3.2 [meta-oe,walnascar,05/21] ser2net: upgrade 4.6.4 -> 4.6.5 [meta-oe,walnascar,06/21] Remove the use of http://ftp.gnome.org/pub/gnome [meta-oe,walnascar,07/21] mm-common: upgrade 1.0.6 -> 1.0.7 [meta-oe,walnascar,08/21] valijson: upgrade 1.0.4 -> 1.0.5 [meta-oe,walnascar,09/21] valijson: upgrade 1.0.5 -> 1.0.6 [meta-oe,walnascar,10/21] tk8: upgrade 8.6.15 -> 8.6.17 [meta-oe,walnascar,11/21] tk: upgrade 9.0.1 -> 9.0.2 [meta-oe,walnascar,12/21] ssd1306: Update to newer version [meta-oe,walnascar,13/21] sexpect: upgrade 2.3.14 -> 2.3.15 [meta-oe,walnascar,14/21] php: ignore CVE-2024-3566 [meta-oe,walnascar,15/21] pahole: fix a Segmentation fault error [meta-oe,walnascar,16/21] iptraf-ng: upgrade 1.2.1 -> 1.2.2 [meta-oe,walnascar,17/21] guider: Upgrade 3.9.8 -> 3.9.9 [meta-oe,walnascar,18/21] iperf3: Fix CVE-2025-54350 [meta-oe,walnascar,19/21] lsscsi: fix versioning [meta-oe,walnascar,20/21] tomlplusplus: Fix test failures with clang/libcxx [meta-oe,walnascar,21/21] safec: Pass Qunused-arguments when using clang

Message ID

20250927063216.1865627-15-ankur.tyagi85@gmail.com

State

New

Headers

From: Ankur Tyagi <ankur.tyagi85@gmail.com>
To: openembedded-devel@lists.openembedded.org
Cc: Jeroen Hofstee <jhofstee@victronenergy.com>,
	Khem Raj <raj.khem@gmail.com>,
	Ankur Tyagi <ankur.tyagi85@gmail.com>
Subject: [oe][meta-oe][walnascar][PATCH 14/21] php: ignore CVE-2024-3566
Date: Sat, 27 Sep 2025 18:32:09 +1200
Message-ID: <20250927063216.1865627-15-ankur.tyagi85@gmail.com>
In-Reply-To: <20250927063216.1865627-1-ankur.tyagi85@gmail.com>
References: <20250927063216.1865627-1-ankur.tyagi85@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

Trying to keep recipes in the walnascar branch updated with useful fixes from the master branch. | expand

Commit Message

Ankur Tyagi Sept. 27, 2025, 6:32 a.m. UTC

From: Jeroen Hofstee <jhofstee@victronenergy.com>

CVE-2024-3566 only effects Microsoft Windows.

Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d68c56e1ed2adc8246a18424ed5d9ede5e8254a0)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta-oe/recipes-devtools/php/php_8.4.10.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta-oe/recipes-devtools/php/php_8.4.10.bb b/meta-oe/recipes-devtools/php/php_8.4.10.bb
index d74552d5e2..ed169742da 100644
--- a/meta-oe/recipes-devtools/php/php_8.4.10.bb
+++ b/meta-oe/recipes-devtools/php/php_8.4.10.bb
@@ -39,6 +39,7 @@  CVE_STATUS_PHP = " \
     CVE-2007-4596 \
 "
 CVE_STATUS[CVE-2022-4900] = "cpe-incorrect: The current version (8.2.20) is not affected."
+CVE_STATUS[CVE-2024-3566] = "not-applicable-platform: Issue only applies on Windows"
 
 inherit autotools pkgconfig python3native gettext multilib_header multilib_script systemd

[meta-oe,walnascar,14/21] php: ignore CVE-2024-3566

Commit Message

Patch