diff options
| author | Andrej Valek <andrej.valek@siemens.com> | 2023-07-20 09:19:50 +0200 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2023-07-21 11:52:26 +0100 |
| commit | c15e506a4674e558922c5a75512ca2b5c296cd44 (patch) | |
| tree | a0cc1ebf9daca61304185ed901596e31f4029658 /meta/recipes-devtools/qemu | |
| parent | 7e18a90d35a62cd6894385a9dab549a594d5f11e (diff) | |
| download | poky-c15e506a4674e558922c5a75512ca2b5c296cd44.tar.gz | |
cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS
- Try to add convert and apply statuses for old CVEs
- Drop some obsolete ignores, while they are not relevant for current
version
(From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7)
Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Reviewed-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-devtools/qemu')
| -rw-r--r-- | meta/recipes-devtools/qemu/qemu.inc | 13 |
1 files changed, 4 insertions, 9 deletions
diff --git a/meta/recipes-devtools/qemu/qemu.inc b/meta/recipes-devtools/qemu/qemu.inc index 16581db69d..64bade86aa 100644 --- a/meta/recipes-devtools/qemu/qemu.inc +++ b/meta/recipes-devtools/qemu/qemu.inc | |||
| @@ -38,21 +38,16 @@ SRC_URI[sha256sum] = "ecf4d32cbef9d397bfc8cc50e4d1e92a1b30253bf32e8ee73c7a8dcf9a | |||
| 38 | SRC_URI:append:class-target = " file://cross.patch" | 38 | SRC_URI:append:class-target = " file://cross.patch" |
| 39 | SRC_URI:append:class-nativesdk = " file://cross.patch" | 39 | SRC_URI:append:class-nativesdk = " file://cross.patch" |
| 40 | 40 | ||
| 41 | # Applies against virglrender < 0.6.0 and not qemu itself | 41 | CVE_STATUS[CVE-2017-5957] = "cpe-incorrect: Applies against virglrender < 0.6.0 and not qemu itself" |
| 42 | CVE_CHECK_IGNORE += "CVE-2017-5957" | ||
| 43 | 42 | ||
| 44 | # The VNC server can expose host files uder some circumstances. We don't | 43 | CVE_STATUS[CVE-2007-0998] = "not-applicable-config: The VNC server can expose host files uder some circumstances. We don't enable it by default." |
| 45 | # enable it by default. | ||
| 46 | CVE_CHECK_IGNORE += "CVE-2007-0998" | ||
| 47 | 44 | ||
| 48 | # 'The issues identified by this CVE were determined to not constitute a vulnerability.' | ||
| 49 | # https://bugzilla.redhat.com/show_bug.cgi?id=1609015#c11 | 45 | # https://bugzilla.redhat.com/show_bug.cgi?id=1609015#c11 |
| 50 | CVE_CHECK_IGNORE += "CVE-2018-18438" | 46 | CVE_STATUS[CVE-2018-18438] = "disputed: The issues identified by this CVE were determined to not constitute a vulnerability." |
| 51 | 47 | ||
| 52 | # As per https://nvd.nist.gov/vuln/detail/CVE-2023-0664 | 48 | # As per https://nvd.nist.gov/vuln/detail/CVE-2023-0664 |
| 53 | # https://bugzilla.redhat.com/show_bug.cgi?id=2167423 | 49 | # https://bugzilla.redhat.com/show_bug.cgi?id=2167423 |
| 54 | # this bug related to windows specific. | 50 | CVE_STATUS[CVE-2023-0664] = "not-applicable-platform: Issue only applies on Windows" |
| 55 | CVE_CHECK_IGNORE += "CVE-2023-0664" | ||
| 56 | 51 | ||
| 57 | COMPATIBLE_HOST:mipsarchn32 = "null" | 52 | COMPATIBLE_HOST:mipsarchn32 = "null" |
| 58 | COMPATIBLE_HOST:mipsarchn64 = "null" | 53 | COMPATIBLE_HOST:mipsarchn64 = "null" |