diff mbox series

[meta-security,scarthgap,19/32] smack: Switch to CVE_STATUS

Message ID	e748adce70a696e477f7ffed064abf5b9af981e8.1763938436.git.scott.murray@konsulko.com
State	New
Headers	show Return-Path: <scott.murray@konsulko.com> ip: 209.85.222.171, mailfrom: scott.murray@konsulko.com) From: Scott Murray <scott.murray@konsulko.com> To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][scarthgap][PATCH 19/32] smack: Switch to CVE_STATUS Date: Sun, 23 Nov 2025 18:44:59 -0500 Message-ID: <e748adce70a696e477f7ffed064abf5b9af981e8.1763938436.git.scott.murray@konsulko.com> In-Reply-To: <cover.1763938436.git.scott.murray@konsulko.com> References: <cover.1763938436.git.scott.murray@konsulko.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	Roll up outstanding fixes \| expand [meta-security,scarthgap,00/32] Roll up outstanding fixes [meta-security,scarthgap,01/32] Update maintainers [meta-security,scarthgap,02/32] CI: update build for new CI [meta-security,scarthgap,03/32] kas: update configuration [meta-security,scarthgap,04/32] scap-security-guide: fix fetch [meta-security,scarthgap,05/32] lynis: update 3.1.1 -> 3.1.4 [meta-security,scarthgap,06/32] chkrootkit: use debian mirror [meta-security,scarthgap,07/32] checksecurity: update the debian package [meta-security,scarthgap,08/32] bastille: prevent host uids on files [meta-security,scarthgap,09/32] libgssglue: switch to use git source [meta-security,scarthgap,10/32] packagegroup-core-security: add missing packages [meta-security,scarthgap,11/32] meta-tpm: Small maintainers fix [meta-security,scarthgap,12/32] ima-evm-utils: remove unnecessary FILESEXTRAPATHS tweak [meta-security,scarthgap,13/32] harden-image-minimal: Fix usermod [meta-security,scarthgap,14/32] suricata: fix CVE-2024-45795 & CVE-2024-45796 [meta-security,scarthgap,15/32] meta-security: Remove True option to getVar calls [meta-security,scarthgap,16/32] suricata: Fix CVE-2024-55605 [meta-security,scarthgap,17/32] clamav: fix CVE-2025-20260 [meta-security,scarthgap,18/32] suricata: fix multiple CVEs [meta-security,scarthgap,19/32] smack: Switch to CVE_STATUS [meta-security,scarthgap,20/32] libhtp: fix CVE-2025-53537 [meta-security,scarthgap,21/32] fail2ban: update to 1.1.0+ [meta-security,scarthgap,22/32] suricata: Fix multiple CVEs [meta-security,scarthgap,23/32] suricata: fix CVE-2024-55627 && CVE-2024-55628 [meta-security,scarthgap,24/32] python3-fail2ban: fix ptest failures [meta-security,scarthgap,25/32] fail2ban: Adapt test output to Automake format for ptest compatibil… [meta-security,scarthgap,26/32] fail2ban: replace fail2ban-python shebang with python3 [meta-security,scarthgap,27/32] suricata: resolve TMPDIR QA issues in do_configure [meta-security,scarthgap,28/32] suricata: drop pkg_postinst_ontarget systemd init [meta-security,scarthgap,29/32] suricata: fix "interface" arg in systemd service [meta-security,scarthgap,30/32] suricata: install classification, reference configs [meta-security,scarthgap,31/32] suricata: populate SYSTEMD_SERVICE for service autostart [meta-security,scarthgap,32/32] suricata: update to 7.0.12

Commit Message

Scott Murray Nov. 23, 2025, 11:44 p.m. UTC

From: Aidan Stewart <astewart@tektelic.com>

CVE_CHECK_IGNORE has been deprecated starting with the Nanbield
release.

Signed-off-by: Aidan Stewart <astewart@tektelic.com>
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
---
 recipes-mac/smack/smack_1.3.1.bb | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff mbox series

Patch

diff --git a/recipes-mac/smack/smack_1.3.1.bb b/recipes-mac/smack/smack_1.3.1.bb
index 6c52392..04e7a6e 100644
--- a/recipes-mac/smack/smack_1.3.1.bb
+++ b/recipes-mac/smack/smack_1.3.1.bb
@@ -13,10 +13,9 @@  SRC_URI = " \
 
 PV = "1.3.1"
 
-# CVE-2014-0363, CVE-2014-0364, CVE-2016-10027 is valnerble for other product.
-CVE_CHECK_IGNORE += "CVE-2014-0363"
-CVE_CHECK_IGNORE += "CVE-2014-0364"
-CVE_CHECK_IGNORE += "CVE-2016-10027"
+CVE_STATUS[CVE-2014-0363] = "cpe-incorrect: Affects Ignite Realtime Smack XMPP API"
+CVE_STATUS[CVE-2014-0364] = "cpe-incorrect: Affects Ignite Realtime Smack XMPP API"
+CVE_STATUS[CVE-2016-10027] = "cpe-incorrect: Affects Ignite Realtime Smack XMPP API"
 
 inherit autotools update-rc.d pkgconfig ptest
 inherit ${@bb.utils.contains('VIRTUAL-RUNTIME_init_manager','systemd','systemd','', d)}