summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDaniel Turull <daniel.turull@ericsson.com>2025-08-18 16:01:02 +0200
committerSteve Sakoman <steve@sakoman.com>2025-08-22 05:59:54 -0700
commit819f151bed1827bb7bdf8823aad2a083e097c61a (patch)
tree525005284b56238484b374941c6fd2b7b3109b7e
parent40999c1bbd2634cca2f28d60993e1bc765774068 (diff)
downloadpoky-819f151bed1827bb7bdf8823aad2a083e097c61a.tar.gz
xz: ignore CVE-2024-47611
According to the NVD entry, it is only applicable when built for native Windows (MinGW-w64 or MSVC). (From OE-Core rev: 04ce4704e603cd66f30ffc001541c6497d84050e) Signed-off-by: Daniel Turull <daniel.turull@ericsson.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
-rw-r--r--meta/recipes-extended/xz/xz_5.4.7.bb2
1 files changed, 2 insertions, 0 deletions
diff --git a/meta/recipes-extended/xz/xz_5.4.7.bb b/meta/recipes-extended/xz/xz_5.4.7.bb
index 563643d4d9..30a4c8e88c 100644
--- a/meta/recipes-extended/xz/xz_5.4.7.bb
+++ b/meta/recipes-extended/xz/xz_5.4.7.bb
@@ -35,6 +35,8 @@ SRC_URI[sha256sum] = "8db6664c48ca07908b92baedcfe7f3ba23f49ef2476864518ab5db6723
35UPSTREAM_CHECK_REGEX = "releases/tag/v(?P<pver>\d+(\.\d+)+)" 35UPSTREAM_CHECK_REGEX = "releases/tag/v(?P<pver>\d+(\.\d+)+)"
36UPSTREAM_CHECK_URI = "https://github.com/tukaani-project/xz/releases/" 36UPSTREAM_CHECK_URI = "https://github.com/tukaani-project/xz/releases/"
37 37
38CVE_STATUS[CVE-2024-47611] = "not-applicable-platform: Issue only applies on Windows"
39
38CACHED_CONFIGUREVARS += "gl_cv_posix_shell=/bin/sh" 40CACHED_CONFIGUREVARS += "gl_cv_posix_shell=/bin/sh"
39 41
40inherit autotools gettext ptest 42inherit autotools gettext ptest