[meta-oe,scarthgap,v2,v2,01/18] dash: set CVE_PRODUCT

Message ID	20251014233233.304125-2-ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.214.175, mailfrom: ankur.tyagi85@gmail.com) From: Ankur Tyagi <ankur.tyagi85@gmail.com> To: openembedded-devel@lists.openembedded.org Cc: Peter Marko <peter.marko@siemens.com>, Khem Raj <raj.khem@gmail.com>, Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [oe][meta-oe][scarthgap][PATCH v2 v2 01/18] dash: set CVE_PRODUCT Date: Wed, 15 Oct 2025 12:32:12 +1300 Message-ID: <20251014233233.304125-2-ankur.tyagi85@gmail.com> In-Reply-To: <20251014233233.304125-1-ankur.tyagi85@gmail.com> References: <20251014233233.304125-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	patch CVE \| expand [meta-oe,scarthgap,v2,v2,00/18] patch CVE [meta-oe,scarthgap,v2,v2,01/18] dash: set CVE_PRODUCT [meta-oe,scarthgap,v2,v2,02/18] libppd: patch CVE-2024-47175 [meta-oe,scarthgap,v2,v2,03/18] hdf5: patch CVE-2025-2923 [meta-oe,scarthgap,v2,v2,04/18] hdf5: patch CVE-2025-2924 [meta-oe,scarthgap,v2,v2,05/18] hdf5: patch CVE-2025-2925 [meta-oe,scarthgap,v2,v2,06/18] hdf5: patch CVE-2025-6269 [meta-oe,scarthgap,v2,v2,07/18] libcupsfilters: patch CVE-2024-47076 [meta-oe,scarthgap,v2,v2,08/18] libraw: patch CVE-2025-43961 CVE-2025-43962 [meta-oe,scarthgap,v2,v2,09/18] libraw: patch CVE-2025-43963 [meta-oe,scarthgap,v2,v2,10/18] libraw: patch CVE-2025-43964 [meta-oe,scarthgap,v2,v2,11/18] zlog: fix CVE-2024-22857 [meta-oe,scarthgap,v2,v2,12/18] exiv2: patch CVE-2025-26623 [meta-oe,scarthgap,v2,v2,13/18] exiv2: patch CVE-2025-54080 [meta-oe,scarthgap,v2,v2,14/18] exiv2: patch CVE-2025-55304 [meta-oe,scarthgap,v2,v2,15/18] gattlib: mark CVE-2019-6498 as fixed [meta-oe,scarthgap,v2,v2,16/18] influxdb: Do not remove non-existing files [meta-oe,scarthgap,v2,v2,17/18] influxdb: Update CVE status for CVE-2019-10329 [meta-oe,scarthgap,v2,v2,18/18] jasper: upgrade to 4.1.2 release

Message ID

20251014233233.304125-2-ankur.tyagi85@gmail.com

State

New

Headers

From: Ankur Tyagi <ankur.tyagi85@gmail.com>
To: openembedded-devel@lists.openembedded.org
Cc: Peter Marko <peter.marko@siemens.com>,
	Khem Raj <raj.khem@gmail.com>,
	Ankur Tyagi <ankur.tyagi85@gmail.com>
Subject: [oe][meta-oe][scarthgap][PATCH v2 v2 01/18] dash: set CVE_PRODUCT
Date: Wed, 15 Oct 2025 12:32:12 +1300
Message-ID: <20251014233233.304125-2-ankur.tyagi85@gmail.com>
In-Reply-To: <20251014233233.304125-1-ankur.tyagi85@gmail.com>
References: <20251014233233.304125-1-ankur.tyagi85@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

patch CVE | expand

Commit Message

Ankur Tyagi Oct. 14, 2025, 11:32 p.m. UTC

From: Peter Marko <peter.marko@siemens.com>

This removes false positive CVE-2024-21485 from cve reports.

$ sqlite3 nvdcve_2-2.db
sqlite> select * from products where product = 'dash';
CVE-2009-0854|dash|dash|0.5.4|=||
CVE-2024-21485|plotly|dash|||2.13.0|<
CVE-2024-21485|plotly|dash|2.14.0|>=|2.15.0|<

Our dash:dash did not reach major version 1 yet.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit e1427013e01df44b9275908f7605e8e25fc3fd83)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta-oe/recipes-shells/dash/dash_0.5.12.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-oe/recipes-shells/dash/dash_0.5.12.bb b/meta-oe/recipes-shells/dash/dash_0.5.12.bb
index 947ef702d7..1bf3625760 100644
--- a/meta-oe/recipes-shells/dash/dash_0.5.12.bb
+++ b/meta-oe/recipes-shells/dash/dash_0.5.12.bb
@@ -10,6 +10,8 @@  inherit autotools update-alternatives
 SRC_URI = "http://gondor.apana.org.au/~herbert/${BPN}/files/${BP}.tar.gz"
 SRC_URI[sha256sum] = "6a474ac46e8b0b32916c4c60df694c82058d3297d8b385b74508030ca4a8f28a"
 
+CVE_PRODUCT = "dash:dash"
+
 EXTRA_OECONF += "--bindir=${base_bindir}"
 
 ALTERNATIVE:${PN} = "sh"

[meta-oe,scarthgap,v2,v2,01/18] dash: set CVE_PRODUCT

Commit Message

Patch