diff options
| author | Andrej Valek <andrej.valek@siemens.com> | 2023-07-20 09:19:50 +0200 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2023-07-21 11:52:26 +0100 |
| commit | c15e506a4674e558922c5a75512ca2b5c296cd44 (patch) | |
| tree | a0cc1ebf9daca61304185ed901596e31f4029658 /meta/recipes-devtools/python | |
| parent | 7e18a90d35a62cd6894385a9dab549a594d5f11e (diff) | |
| download | poky-c15e506a4674e558922c5a75512ca2b5c296cd44.tar.gz | |
cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS
- Try to add convert and apply statuses for old CVEs
- Drop some obsolete ignores, while they are not relevant for current
version
(From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7)
Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Reviewed-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-devtools/python')
| -rw-r--r-- | meta/recipes-devtools/python/python3_3.11.4.bb | 16 |
1 files changed, 6 insertions, 10 deletions
diff --git a/meta/recipes-devtools/python/python3_3.11.4.bb b/meta/recipes-devtools/python/python3_3.11.4.bb index 7a277facf7..b3534ad678 100644 --- a/meta/recipes-devtools/python/python3_3.11.4.bb +++ b/meta/recipes-devtools/python/python3_3.11.4.bb | |||
| @@ -47,17 +47,13 @@ UPSTREAM_CHECK_URI = "https://www.python.org/downloads/source/" | |||
| 47 | 47 | ||
| 48 | CVE_PRODUCT = "python" | 48 | CVE_PRODUCT = "python" |
| 49 | 49 | ||
| 50 | # Upstream consider this expected behaviour | 50 | CVE_STATUS[CVE-2007-4559] = "disputed: Upstream consider this expected behaviour" |
| 51 | CVE_CHECK_IGNORE += "CVE-2007-4559" | 51 | CVE_STATUS[CVE-2019-18348] = "not-applicable-config: This is not exploitable when glibc has CVE-2016-10739 fixed" |
| 52 | # This is not exploitable when glibc has CVE-2016-10739 fixed. | 52 | CVE_STATUS[CVE-2020-15523] = "not-applicable-platform: Issue only applies on Windows" |
| 53 | CVE_CHECK_IGNORE += "CVE-2019-18348" | 53 | CVE_STATUS[CVE-2022-26488] = "not-applicable-platform: Issue only applies on Windows" |
| 54 | # These are specific to Microsoft Windows | ||
| 55 | CVE_CHECK_IGNORE += "CVE-2020-15523 CVE-2022-26488" | ||
| 56 | # The mailcap module is insecure by design, so this can't be fixed in a meaningful way. | ||
| 57 | # The module will be removed in the future and flaws documented. | 54 | # The module will be removed in the future and flaws documented. |
| 58 | CVE_CHECK_IGNORE += "CVE-2015-20107" | 55 | CVE_STATUS[CVE-2015-20107] = "upstream-wontfix: The mailcap module is insecure by design, so this can't be fixed in a meaningful way" |
| 59 | # Not an issue, in fact expected behaviour | 56 | # CVE_STATUS[CVE-2023-36632] = "disputed: Not an issue, in fact expected behaviour" |
| 60 | CVE_CHECK_IGNORE += "CVE-2023-36632" | ||
| 61 | 57 | ||
| 62 | PYTHON_MAJMIN = "3.11" | 58 | PYTHON_MAJMIN = "3.11" |
| 63 | 59 | ||