From 0304adce226f69085c3482527db3f9a3f6dd82a2 Mon Sep 17 00:00:00 2001 From: Harish Sadineni Date: Wed, 10 Apr 2024 04:43:31 -0700 Subject: rust: set CVE_STATUS for CVE-2024-24576 CVE-2024-24576 only applies when invoking batch files (with the `bat` and `cmd` extensions) on Windows & No other platform or use is affected. More details about CVE is here: https://nvd.nist.gov/vuln/detail/CVE-2024-24576 (From OE-Core rev: 28eddfa53494c7560861feff84be3f3a5a46aecb) Signed-off-by: Harish Sadineni Signed-off-by: Richard Purdie --- meta/recipes-devtools/rust/rust-source.inc | 2 ++ 1 file changed, 2 insertions(+) (limited to 'meta/recipes-devtools') diff --git a/meta/recipes-devtools/rust/rust-source.inc b/meta/recipes-devtools/rust/rust-source.inc index 6bef99039d..b14221b6cb 100644 --- a/meta/recipes-devtools/rust/rust-source.inc +++ b/meta/recipes-devtools/rust/rust-source.inc @@ -20,3 +20,5 @@ RUSTSRC = "${WORKDIR}/rustc-${RUST_VERSION}-src" UPSTREAM_CHECK_URI = "https://forge.rust-lang.org/infra/other-installation-methods.html" UPSTREAM_CHECK_REGEX = "rustc-(?P\d+(\.\d+)+)-src" + +CVE_STATUS[CVE-2024-24576] = "not-applicable-platform: Issue only applies on Windows" -- cgit v1.2.3-54-g00ecf