diff options
| author | Peter Marko <peter.marko@siemens.com> | 2024-12-27 11:56:02 +0100 |
|---|---|---|
| committer | Khem Raj <raj.khem@gmail.com> | 2024-12-27 09:21:42 -0800 |
| commit | e44f3251b552773fe9346fdf7aab244377cf6007 (patch) | |
| tree | 74ec9dbc7ae3f369adbfb3da4f08ab7d92247126 | |
| parent | 9f7c1e6bd101494c6cc5dad16a7fa65a13cbac70 (diff) | |
| download | meta-openembedded-e44f3251b552773fe9346fdf7aab244377cf6007.tar.gz | |
spice: set CVE-2016-2150 status to fixed
Debian has fixed this CVE with [1].
That patch is taken from [2].
.../tmp/work/core2-64-poky-linux/spice/0.15.2/git$ git describe 69628ea13
v0.13.1-190-g69628ea1
.../tmp/work/core2-64-poky-linux/spice/0.15.2/git$ git tag --contains 69628ea13
v0.13.2
[1] https://sources.debian.org/patches/spice/0.12.5-1%2Bdeb8u5/CVE-2016-2150/0002-improve-primary-surface-parameter-checks.patch/
[2] https://gitlab.freedesktop.org/spice/spice/-/commit/69628ea1375282cb7ca5b4dc4410e7aa67e0fc02
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
| -rw-r--r-- | meta-networking/recipes-support/spice/spice_git.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-networking/recipes-support/spice/spice_git.bb b/meta-networking/recipes-support/spice/spice_git.bb index 5e6d8584e3..7900a7dea5 100644 --- a/meta-networking/recipes-support/spice/spice_git.bb +++ b/meta-networking/recipes-support/spice/spice_git.bb | |||
| @@ -22,6 +22,7 @@ SRC_URI = "gitsm://gitlab.freedesktop.org/spice/spice;branch=master;protocol=htt | |||
| 22 | S = "${WORKDIR}/git" | 22 | S = "${WORKDIR}/git" |
| 23 | 23 | ||
| 24 | CVE_STATUS[CVE-2016-0749] = "fixed-version: patched since 0.13.2" | 24 | CVE_STATUS[CVE-2016-0749] = "fixed-version: patched since 0.13.2" |
| 25 | CVE_STATUS[CVE-2016-2150] = "fixed-version: patched since 0.13.2" | ||
| 25 | CVE_STATUS[CVE-2018-10893] = "fixed-version: patched already, caused by inaccurate CPE in the NVD database." | 26 | CVE_STATUS[CVE-2018-10893] = "fixed-version: patched already, caused by inaccurate CPE in the NVD database." |
| 26 | 27 | ||
| 27 | inherit meson gettext python3native python3-dir pkgconfig | 28 | inherit meson gettext python3native python3-dir pkgconfig |