From 03d23dca9225250d8ce326b393a4fa04ae000bbb Mon Sep 17 00:00:00 2001 From: Changqing Li Date: Mon, 4 Sep 2023 10:09:47 +0800 Subject: sqlite3: set CVE_STATUS for CVE-2023-36191 The error is a bug. It has been fixed upstream. But it is not a vulnerability. You may safely ignore the CVE. Refer: [1] https://www.sqlite.org/forum/forumpost/19f55ef73b (From OE-Core rev: 34874433c1e6c9e21d45d9ba686e4bb15479659d) Signed-off-by: Changqing Li Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie --- meta/recipes-support/sqlite/sqlite3_3.43.0.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-support/sqlite/sqlite3_3.43.0.bb b/meta/recipes-support/sqlite/sqlite3_3.43.0.bb index e6d7bb9cd5..84644a09e6 100644 --- a/meta/recipes-support/sqlite/sqlite3_3.43.0.bb +++ b/meta/recipes-support/sqlite/sqlite3_3.43.0.bb @@ -6,3 +6,5 @@ LIC_FILES_CHKSUM = "file://sqlite3.h;endline=11;md5=786d3dc581eff03f4fd9e4a77ed0 SRC_URI = "http://www.sqlite.org/2023/sqlite-autoconf-${SQLITE_PV}.tar.gz" SRC_URI[sha256sum] = "49008dbf3afc04d4edc8ecfc34e4ead196973034293c997adad2f63f01762ae1" +CVE_STATUS[CVE-2023-36191] = "disputed: The error is a bug. It has been fixed upstream. But it is not a vulnerability" + -- cgit v1.2.3-54-g00ecf