diff options
| author | Gyorgy Sarvari <skandigraun@gmail.com> | 2025-10-14 15:59:08 +0200 |
|---|---|---|
| committer | Gyorgy Sarvari <skandigraun@gmail.com> | 2025-10-17 10:51:27 +0200 |
| commit | df0b60ad518af83c18516c5398dc650b83a21dd9 (patch) | |
| tree | 3a1c461b52ca23b6943e8750f3e7e21ebc509535 /meta-webserver | |
| parent | 8d733ee01b88818296a4b686ddf903bffcbf49fe (diff) | |
| download | meta-openembedded-df0b60ad518af83c18516c5398dc650b83a21dd9.tar.gz | |
apache2: ignore CVE-2025-3891
The vulnerability was reported against mod_auth_openidc, which module
is a 3rd party one, and not part of the apache2 source distribution.
The affected module is not part of the meta-oe universe currently,
so ignore the CVE.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Diffstat (limited to 'meta-webserver')
| -rw-r--r-- | meta-webserver/recipes-httpd/apache2/apache2_2.4.65.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta-webserver/recipes-httpd/apache2/apache2_2.4.65.bb b/meta-webserver/recipes-httpd/apache2/apache2_2.4.65.bb index e6a40e0239..8470bdd832 100644 --- a/meta-webserver/recipes-httpd/apache2/apache2_2.4.65.bb +++ b/meta-webserver/recipes-httpd/apache2/apache2_2.4.65.bb | |||
| @@ -55,6 +55,8 @@ CVE_CHECK_IGNORE += "CVE-2007-6421 CVE-2007-6422" | |||
| 55 | CVE_CHECK_IGNORE += "CVE-2007-6423" | 55 | CVE_CHECK_IGNORE += "CVE-2007-6423" |
| 56 | # cpe-incorrect: The current version is not affected by the CVE which affects versions up to 2.2.6 (excl.) | 56 | # cpe-incorrect: The current version is not affected by the CVE which affects versions up to 2.2.6 (excl.) |
| 57 | CVE_CHECK_IGNORE += "CVE-2008-2168" | 57 | CVE_CHECK_IGNORE += "CVE-2008-2168" |
| 58 | # cpe-incorrect: The CVE is for a 3rd party module, which is not part of the Apache source distribution | ||
| 59 | CVE_CHECK_IGNORE += "CVE-2025-3891" | ||
| 58 | 60 | ||
| 59 | SSTATE_SCAN_FILES += "apxs config_vars.mk config.nice" | 61 | SSTATE_SCAN_FILES += "apxs config_vars.mk config.nice" |
| 60 | 62 | ||