[meta-perl,kirkstone,03/10] logcheck: ignore CVE-2017-20148

Message ID	20251122193128.1703871-3-skandigraun@gmail.com
State	New
Headers	show Return-Path: <skandigraun@gmail.com> ip: 209.85.221.49, mailfrom: skandigraun@gmail.com) From: Gyorgy Sarvari <skandigraun@gmail.com> To: openembedded-devel@lists.openembedded.org Subject: [meta-perl][kirkstone][PATCH 03/10] logcheck: ignore CVE-2017-20148 Date: Sat, 22 Nov 2025 20:31:21 +0100 Message-ID: <20251122193128.1703871-3-skandigraun@gmail.com> In-Reply-To: <20251122193128.1703871-1-skandigraun@gmail.com> References: <20251122193128.1703871-1-skandigraun@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-webserver,kirkstone,01/10] monkey: Update status for CVE-2013-2183 \| expand [meta-webserver,kirkstone,01/10] monkey: Update status for CVE-2013-2183 [meta-webserver,kirkstone,02/10] monkey: ignore CVE-2013-1771 [meta-perl,kirkstone,03/10] logcheck: ignore CVE-2017-20148 [meta-oe,kirkstone,04/10] libtorrent: ignore CVE-2016-5301 [meta-oe,kirkstone,05/10] exiv2: patch CVE-2021-29623 [meta-oe,kirkstone,06/10] exiv2: add missing CVE tag to patch [meta-oe,kirkstone,07/10] exiv2: patch CVE-2021-32617 [meta-oe,kirkstone,08/10] exiv2: patch CVE-2021-32815 [meta-oe,kirkstone,09/10] exiv2: patch CVE-2021-34334 [meta-oe,kirkstone,10/10] exiv2: patch CVE-2021-34335

Message ID

20251122193128.1703871-3-skandigraun@gmail.com

State

New

Headers

From: Gyorgy Sarvari <skandigraun@gmail.com>
To: openembedded-devel@lists.openembedded.org
Subject: [meta-perl][kirkstone][PATCH 03/10] logcheck: ignore CVE-2017-20148
Date: Sat, 22 Nov 2025 20:31:21 +0100
Message-ID: <20251122193128.1703871-3-skandigraun@gmail.com>
In-Reply-To: <20251122193128.1703871-1-skandigraun@gmail.com>
References: <20251122193128.1703871-1-skandigraun@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[meta-webserver,kirkstone,01/10] monkey: Update status for CVE-2013-2183 | expand

Commit Message

Gyorgy Sarvari Nov. 22, 2025, 7:31 p.m. UTC

Details: https://nvd.nist.gov/vuln/detail/CVE-2017-20148

The issue is specific to the postinstall script that Gentoo packages
with this application - we can ignore it.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 meta-perl/recipes-extended/logcheck/logcheck_1.3.23.bb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/meta-perl/recipes-extended/logcheck/logcheck_1.3.23.bb b/meta-perl/recipes-extended/logcheck/logcheck_1.3.23.bb
index b40d52ab94..ce6118a12b 100644
--- a/meta-perl/recipes-extended/logcheck/logcheck_1.3.23.bb
+++ b/meta-perl/recipes-extended/logcheck/logcheck_1.3.23.bb
@@ -77,3 +77,6 @@  RDEPENDS:${PN} = "\
 "
 
 FILES:${PN} += "${datadir}/logtail"
+
+# This vulnerability is specific to the way Gentoo packages this application.
+CVE_CHECK_IGNORE += "CVE-2017-20148"

[meta-perl,kirkstone,03/10] logcheck: ignore CVE-2017-20148

Commit Message

Patch