diff mbox series

[meta-gnome,whinlatter,01/11] accountservice: ignore CVE-2023-3297

Message ID 20251229145152.489068-1-skandigraun@gmail.com
State Accepted, archived
Delegated to: Anuj Mittal
Headers show
Series [meta-gnome,whinlatter,01/11] accountservice: ignore CVE-2023-3297 | expand

Commit Message

Gyorgy Sarvari Dec. 29, 2025, 2:51 p.m. UTC 
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-3297

The vulnerability is triggered by a patch added by Ubuntu, and the vulnerable patch is
not present in the recipe.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 071a45c9d76c9a222c8fbaa50089a8af44f44e74)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 .../recipes-support/accountsservice/accountsservice_23.13.9.bb  | 2 ++
 1 file changed, 2 insertions(+)

Comments

Ankur Tyagi Jan. 6, 2026, 9:16 a.m. UTC | #1 
typo in commit message, accountservice -> accountsservice

On Tue, Dec 30, 2025 at 3:51 AM Gyorgy Sarvari via
lists.openembedded.org <skandigraun=gmail.com@lists.openembedded.org>
wrote:
>
> Details: https://nvd.nist.gov/vuln/detail/CVE-2023-3297
>
> The vulnerability is triggered by a patch added by Ubuntu, and the vulnerable patch is
> not present in the recipe.
>
> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
> Signed-off-by: Khem Raj <raj.khem@gmail.com>
> (cherry picked from commit 071a45c9d76c9a222c8fbaa50089a8af44f44e74)
> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
> ---
>  .../recipes-support/accountsservice/accountsservice_23.13.9.bb  | 2 ++
>  1 file changed, 2 insertions(+)
>
> diff --git a/meta-gnome/recipes-support/accountsservice/accountsservice_23.13.9.bb b/meta-gnome/recipes-support/accountsservice/accountsservice_23.13.9.bb
> index e3dfcfffff..c024ae3f92 100644
> --- a/meta-gnome/recipes-support/accountsservice/accountsservice_23.13.9.bb
> +++ b/meta-gnome/recipes-support/accountsservice/accountsservice_23.13.9.bb
> @@ -41,3 +41,5 @@ FILES:${PN} += " \
>      ${datadir}/dbus-1 \
>      ${datadir}/polkit-1 \
>  "
> +
> +CVE_STATUS[CVE-2023-3297] = "not-applicable-platform: The vulnerability is Ubuntu specific"
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#122980): https://lists.openembedded.org/g/openembedded-devel/message/122980
> Mute This Topic: https://lists.openembedded.org/mt/116984421/3619737
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [ankur.tyagi85@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
diff mbox series

Patch

diff --git a/meta-gnome/recipes-support/accountsservice/accountsservice_23.13.9.bb b/meta-gnome/recipes-support/accountsservice/accountsservice_23.13.9.bb
index e3dfcfffff..c024ae3f92 100644
--- a/meta-gnome/recipes-support/accountsservice/accountsservice_23.13.9.bb
+++ b/meta-gnome/recipes-support/accountsservice/accountsservice_23.13.9.bb
@@ -41,3 +41,5 @@  FILES:${PN} += " \
     ${datadir}/dbus-1 \
     ${datadir}/polkit-1 \
 "
+
+CVE_STATUS[CVE-2023-3297] = "not-applicable-platform: The vulnerability is Ubuntu specific"