[meta-security,v2] smack: Use new CVE_STATUS variable

Message ID	601934b3-5e3b-44ea-af40-36c4deaeef8a@gmail.com
State	New
Headers	show Return-Path: <majortomtosourcecontrol@gmail.com> ip: 209.85.210.41, mailfrom: majortomtosourcecontrol@gmail.com) Message-ID: <601934b3-5e3b-44ea-af40-36c4deaeef8a@gmail.com> Date: Fri, 27 Jun 2025 16:48:59 -0600 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US To: yocto-patches@lists.yoctoproject.org, scott.murray@konsulko.com, rybczynska@gmail.com From: Clayton Casciato <majortomtosourcecontrol@gmail.com> Subject: [meta-security][PATCH v2] smack: Use new CVE_STATUS variable Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit
Series	[meta-security,v2] smack: Use new CVE_STATUS variable \| expand [meta-security,v2] smack: Use new CVE_STATUS variable

Message ID

601934b3-5e3b-44ea-af40-36c4deaeef8a@gmail.com

State

New

Headers

Message-ID: <601934b3-5e3b-44ea-af40-36c4deaeef8a@gmail.com>
Date: Fri, 27 Jun 2025 16:48:59 -0600
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Content-Language: en-US
To: yocto-patches@lists.yoctoproject.org, scott.murray@konsulko.com,
 rybczynska@gmail.com
From: Clayton Casciato <majortomtosourcecontrol@gmail.com>
Subject: [meta-security][PATCH v2] smack: Use new CVE_STATUS variable
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

Series

[meta-security,v2] smack: Use new CVE_STATUS variable | expand

Commit Message

Clayton Casciato June 27, 2025, 10:48 p.m. UTC

"CVE_CHECK_IGNORE is deprecated in favor of CVE_STATUS"

https://docs.yoctoproject.org/dev/ref-manual/variables.html#term-CVE_STATUS

Signed-off-by: Clayton Casciato <majortomtosourcecontrol@gmail.com>
---
Sponsor: 21SoftWare LLC

v2: add warning message to commit body
v1: https://lists.yoctoproject.org/g/yocto-patches/topic/111623070

 recipes-mac/smack/smack_1.3.1.bb | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/recipes-mac/smack/smack_1.3.1.bb b/recipes-mac/smack/smack_1.3.1.bb
index 6c52392..7b20e6b 100644
--- a/recipes-mac/smack/smack_1.3.1.bb
+++ b/recipes-mac/smack/smack_1.3.1.bb
@@ -13,10 +13,9 @@  SRC_URI = " \
 
 PV = "1.3.1"
 
-# CVE-2014-0363, CVE-2014-0364, CVE-2016-10027 is valnerble for other product.
-CVE_CHECK_IGNORE += "CVE-2014-0363"
-CVE_CHECK_IGNORE += "CVE-2014-0364"
-CVE_CHECK_IGNORE += "CVE-2016-10027"
+CVE_STATUS[CVE-2014-0363] = "cpe-incorrect: different product"
+CVE_STATUS[CVE-2014-0364] = "cpe-incorrect: different product"
+CVE_STATUS[CVE-2016-10027] = "cpe-incorrect: different product"
 
 inherit autotools update-rc.d pkgconfig ptest
 inherit ${@bb.utils.contains('VIRTUAL-RUNTIME_init_manager','systemd','systemd','', d)}

[meta-security,v2] smack: Use new CVE_STATUS variable

Commit Message

Patch