diff mbox series

[meta-oe,scarthgap,8/8] gnome-settings-daemon: ignore CVE-2024-38394

Message ID 20260206082048.1442403-8-skandigraun@gmail.com
State New
Headers show
Series [meta-oe,scarthgap,1/8] fontforge: patch CVE-2025-15279 | expand

Commit Message

Gyorgy Sarvari Feb. 6, 2026, 8:20 a.m. UTC 
Details: https://nvd.nist.gov/vuln/detail/CVE-2024-38394

The CVE has the disputed flag. The project maintainers claim that the issue
is not in gnome-setttings-daemon. If the vulnerability needs to be handled
in gnome-settings-daemon, than it is a new feature rather than a vulnerability fix.

Due to this, ignore this CVE.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 .../gnome-settings-daemon/gnome-settings-daemon_46.0.bb         | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/meta-gnome/recipes-gnome/gnome-settings-daemon/gnome-settings-daemon_46.0.bb b/meta-gnome/recipes-gnome/gnome-settings-daemon/gnome-settings-daemon_46.0.bb
index d409e77eae..7e3afa7998 100644
--- a/meta-gnome/recipes-gnome/gnome-settings-daemon/gnome-settings-daemon_46.0.bb
+++ b/meta-gnome/recipes-gnome/gnome-settings-daemon/gnome-settings-daemon_46.0.bb
@@ -48,3 +48,5 @@  FILES:${PN} += " \
     ${systemd_user_unitdir} \
     ${libdir}/gnome-settings-daemon-${@gnome_verdir("${PV}")}/libgsd.so \
 "
+
+CVE_STATUS[CVE-2024-38394] = "disputed: mitigation would be a new feature, not a CVE"