summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPeter Marko <peter.marko@siemens.com>2024-10-13 14:56:42 +0200
committerSteve Sakoman <steve@sakoman.com>2024-10-24 06:31:58 -0700
commit87ebb58a64fc46ca4d7d16b4bc218310ce5c2229 (patch)
tree14673dd61c4aa2398925a7dab19f71f3f24a26e8
parent7e87dc422d972e0dc98372318fcdc63a76347d16 (diff)
downloadpoky-87ebb58a64fc46ca4d7d16b4bc218310ce5c2229.tar.gz
gcc: ignore CVE-2023-4039
Last version bump removed patch for this CVE because it was integrated in new release. This has caused the CVE to reappear in reports because 2023-09-12 is "higher" than 11.5... (From OE-Core rev: d74fd7c4e9353fc00f0b79f05de101efb0148a6f) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
-rw-r--r--meta/recipes-devtools/gcc/gcc-11.5.inc3
1 files changed, 3 insertions, 0 deletions
diff --git a/meta/recipes-devtools/gcc/gcc-11.5.inc b/meta/recipes-devtools/gcc/gcc-11.5.inc
index c316d2a9a0..5d29b8e61e 100644
--- a/meta/recipes-devtools/gcc/gcc-11.5.inc
+++ b/meta/recipes-devtools/gcc/gcc-11.5.inc
@@ -121,3 +121,6 @@ EXTRA_OECONF_PATHS = "\
121 121
122# Is a binutils 2.26 issue, not gcc 122# Is a binutils 2.26 issue, not gcc
123CVE_CHECK_IGNORE += "CVE-2021-37322" 123CVE_CHECK_IGNORE += "CVE-2021-37322"
124
125# This is fixed by commit 75c37e0314, nvd uses arm versioning (2023-09-12) which will alway be higher than 11.x
126CVE_CHECK_IGNORE += "CVE-2023-4039"