diff options
| author | Harish Sadineni <Harish.Sadineni@windriver.com> | 2024-04-16 04:51:31 -0700 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2024-04-21 06:33:34 -0700 |
| commit | 0f437fb0f2bc7f27aab3dee70544f2a339cdccaa (patch) | |
| tree | 57ef64138319ad67f936ee4ad78af39a04caf116 | |
| parent | 70c869275acef71c69be8f88207741384c61fba0 (diff) | |
| download | poky-0f437fb0f2bc7f27aab3dee70544f2a339cdccaa.tar.gz | |
rust: add CVE_CHECK_IGNORE for CVE-2024-24576
CVE-2024-24576 only applies when invoking batch files (with the `bat` and `cmd` extensions) on Windows & No other platform or use is affected.
More details about CVE is here: https://nvd.nist.gov/vuln/detail/CVE-2024-24576
(From OE-Core rev: 44e0b6b028657d32de5971d6a42a88767ef8c710)
Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
| -rw-r--r-- | meta/recipes-devtools/rust/rust-source.inc | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/meta/recipes-devtools/rust/rust-source.inc b/meta/recipes-devtools/rust/rust-source.inc index ea70ad786f..c377a680a7 100644 --- a/meta/recipes-devtools/rust/rust-source.inc +++ b/meta/recipes-devtools/rust/rust-source.inc | |||
| @@ -5,3 +5,6 @@ RUSTSRC = "${WORKDIR}/rustc-${PV}-src" | |||
| 5 | 5 | ||
| 6 | UPSTREAM_CHECK_URI = "https://forge.rust-lang.org/infra/other-installation-methods.html" | 6 | UPSTREAM_CHECK_URI = "https://forge.rust-lang.org/infra/other-installation-methods.html" |
| 7 | UPSTREAM_CHECK_REGEX = "rustc-(?P<pver>\d+(\.\d+)+)-src" | 7 | UPSTREAM_CHECK_REGEX = "rustc-(?P<pver>\d+(\.\d+)+)-src" |
| 8 | |||
| 9 | #CVE-2024-24576 is specific to Microsoft Windows | ||
| 10 | CVE_CHECK_IGNORE += "CVE-2024-24576" | ||