[meta-security,02/12] smack: Use new CVE_STATUS variable

Message ID	ef790621653f6b88adfe58be4a1f508408d48cd2.1751647559.git.scott.murray@konsulko.com
State	New
Headers	show Return-Path: <scott.murray@konsulko.com> ip: 209.85.160.175, mailfrom: scott.murray@konsulko.com) From: Scott Murray <scott.murray@konsulko.com> To: yocto-patches@lists.yoctoproject.org Cc: Clayton Casciato <majortomtosourcecontrol@gmail.com>, Scott Murray <scott.murray@konsulko.com> Subject: [meta-security][PATCH 02/12] smack: Use new CVE_STATUS variable Date: Fri, 4 Jul 2025 13:11:06 -0400 Message-ID: <ef790621653f6b88adfe58be4a1f508408d48cd2.1751647559.git.scott.murray@konsulko.com> In-Reply-To: <cover.1751647559.git.scott.murray@konsulko.com> References: <cover.1751647559.git.scott.murray@konsulko.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	Initial fixes for master branch \| expand [meta-security,00/12] Initial fixes for master branch [meta-security,01/12] Fix warning : lack of whitespace around assignment [meta-security,02/12] smack: Use new CVE_STATUS variable [meta-security,03/12] layer.conf: Update to whinlatter (5.3) release [meta-security,04/12] Adapt to S/UNPACKDIR changes [meta-security,05/12] parsec-service: update PACKAGECONFIG options as lists of cargo build features [meta-security,06/12] scap-security-guide: fix fetch [meta-security,07/12] sshguard: Update to 2.5.1 [meta-security,08/12] libhoth: update to latest [meta-security,09/12] chkrootkit: use Debian mirror [meta-security,10/12] chkrootkit: fix building with gcc 15 [meta-security,11/12] CI: update build for new CI [meta-security,12/12] .gitlab-ci.yml: add logging of jobs to files

Message ID

ef790621653f6b88adfe58be4a1f508408d48cd2.1751647559.git.scott.murray@konsulko.com

State

New

Headers

From: Scott Murray <scott.murray@konsulko.com>
To: yocto-patches@lists.yoctoproject.org
Cc: Clayton Casciato <majortomtosourcecontrol@gmail.com>,
	Scott Murray <scott.murray@konsulko.com>
Subject: [meta-security][PATCH 02/12] smack: Use new CVE_STATUS variable
Date: Fri,  4 Jul 2025 13:11:06 -0400
Message-ID: 
 <ef790621653f6b88adfe58be4a1f508408d48cd2.1751647559.git.scott.murray@konsulko.com>
In-Reply-To: <cover.1751647559.git.scott.murray@konsulko.com>
References: <cover.1751647559.git.scott.murray@konsulko.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

Initial fixes for master branch | expand

Commit Message

Scott Murray July 4, 2025, 5:11 p.m. UTC

From: Clayton Casciato <majortomtosourcecontrol@gmail.com>

Fix "CVE_CHECK_IGNORE is deprecated in favor of CVE_STATUS"

https://docs.yoctoproject.org/dev/ref-manual/variables.html#term-CVE_STATUS

Signed-off-by: Clayton Casciato <majortomtosourcecontrol@gmail.com>
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
---
 recipes-mac/smack/smack_1.3.1.bb | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/recipes-mac/smack/smack_1.3.1.bb b/recipes-mac/smack/smack_1.3.1.bb
index 6c52392..7b20e6b 100644
--- a/recipes-mac/smack/smack_1.3.1.bb
+++ b/recipes-mac/smack/smack_1.3.1.bb
@@ -13,10 +13,9 @@  SRC_URI = " \
 
 PV = "1.3.1"
 
-# CVE-2014-0363, CVE-2014-0364, CVE-2016-10027 is valnerble for other product.
-CVE_CHECK_IGNORE += "CVE-2014-0363"
-CVE_CHECK_IGNORE += "CVE-2014-0364"
-CVE_CHECK_IGNORE += "CVE-2016-10027"
+CVE_STATUS[CVE-2014-0363] = "cpe-incorrect: different product"
+CVE_STATUS[CVE-2014-0364] = "cpe-incorrect: different product"
+CVE_STATUS[CVE-2016-10027] = "cpe-incorrect: different product"
 
 inherit autotools update-rc.d pkgconfig ptest
 inherit ${@bb.utils.contains('VIRTUAL-RUNTIME_init_manager','systemd','systemd','', d)}

[meta-security,02/12] smack: Use new CVE_STATUS variable

Commit Message

Patch