diff options
| author | Peter Marko <peter.marko@siemens.com> | 2025-05-03 20:56:34 +0200 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-05-14 06:38:21 -0700 |
| commit | 235e74ba096c3d3f9b86e81d60fb9e9f6424df86 (patch) | |
| tree | 66834e770a0d45c93fba9c5299573658c252568d | |
| parent | e9e862752d122945318685ff9eaf6a3090f0f961 (diff) | |
| download | poky-235e74ba096c3d3f9b86e81d60fb9e9f6424df86.tar.gz | |
ghostscript: ignore CVE-2025-27837
This CVE only impacts codepaths relevant for Windows builds.
Se [1] from Debian which marks it as not applicable.
[1] https://security-tracker.debian.org/tracker/CVE-2025-27837
(From OE-Core rev: fb5dc4a476bc4054493d6a7eb64a423e3665afb9)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
| -rw-r--r-- | meta/recipes-extended/ghostscript/ghostscript_9.55.0.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta/recipes-extended/ghostscript/ghostscript_9.55.0.bb b/meta/recipes-extended/ghostscript/ghostscript_9.55.0.bb index 3d4ac77cfa..fd0506f438 100644 --- a/meta/recipes-extended/ghostscript/ghostscript_9.55.0.bb +++ b/meta/recipes-extended/ghostscript/ghostscript_9.55.0.bb | |||
| @@ -26,6 +26,8 @@ CVE_CHECK_IGNORE += "CVE-2013-6629" | |||
| 26 | CVE_CHECK_IGNORE += "CVE-2023-38560 CVE-2024-46954" | 26 | CVE_CHECK_IGNORE += "CVE-2023-38560 CVE-2024-46954" |
| 27 | # Vulnerable code was introduced in 9.56.0, so 9.55.0 is not affected yet | 27 | # Vulnerable code was introduced in 9.56.0, so 9.55.0 is not affected yet |
| 28 | CVE_CHECK_IGNORE += "CVE-2025-27833" | 28 | CVE_CHECK_IGNORE += "CVE-2025-27833" |
| 29 | # Only impacts codepaths relevant for Windows builds | ||
| 30 | CVE_CHECK_IGNORE += "CVE-2025-27837" | ||
| 29 | 31 | ||
| 30 | def gs_verdir(v): | 32 | def gs_verdir(v): |
| 31 | return "".join(v.split(".")) | 33 | return "".join(v.split(".")) |