1 files changed, 6 insertions, 10 deletions
diff --git a/meta/recipes-devtools/python/python3_3.11.4.bb b/meta/recipes-devtools/python/python3_3.11.4.bb
index 7a277facf7..b3534ad678 100644
--- a/meta/recipes-devtools/python/python3_3.11.4.bb
+++ b/meta/recipes-devtools/python/python3_3.11.4.bb
@@ -47,17 +47,13 @@ UPSTREAM_CHECK_URI = "https://www.python.org/downloads/source/"
 CVE_PRODUCT = "python"
-# Upstream consider this expected behaviour
+CVE_STATUS[CVE-2007-4559] = "disputed: Upstream consider this expected behaviour"
-CVE_CHECK_IGNORE += "CVE-2007-4559"
+CVE_STATUS[CVE-2019-18348] = "not-applicable-config: This is not exploitable when glibc has CVE-2016-10739 fixed"
-# This is not exploitable when glibc has CVE-2016-10739 fixed.
+CVE_STATUS[CVE-2020-15523] = "not-applicable-platform: Issue only applies on Windows"
-CVE_CHECK_IGNORE += "CVE-2019-18348"
+CVE_STATUS[CVE-2022-26488] = "not-applicable-platform: Issue only applies on Windows"
-# These are specific to Microsoft Windows
-CVE_CHECK_IGNORE += "CVE-2020-15523 CVE-2022-26488"
-# The mailcap module is insecure by design, so this can't be fixed in a meaningful way.
 # The module will be removed in the future and flaws documented.
-CVE_CHECK_IGNORE += "CVE-2015-20107"
+CVE_STATUS[CVE-2015-20107] = "upstream-wontfix: The mailcap module is insecure by design, so this can't be fixed in a meaningful way"
-# Not an issue, in fact expected behaviour
+# CVE_STATUS[CVE-2023-36632] = "disputed: Not an issue, in fact expected behaviour"
-CVE_CHECK_IGNORE += "CVE-2023-36632"
 PYTHON_MAJMIN = "3.11"

diff --git a/meta/recipes-devtools/python/python3_3.11.4.bb b/meta/recipes-devtools/python/python3_3.11.4.bb index 7a277facf7..b3534ad678 100644 --- a/meta/recipes-devtools/python/python3_3.11.4.bb +++ b/meta/recipes-devtools/python/python3_3.11.4.bb
@@ -47,17 +47,13 @@ UPSTREAM_CHECK_URI = "https://www.python.org/downloads/source/"
47		47
48	CVE_PRODUCT = "python"	48	CVE_PRODUCT = "python"
49		49
50	# Upstream consider this expected behaviour	50	CVE_STATUS[CVE-2007-4559] = "disputed: Upstream consider this expected behaviour"
51	CVE_CHECK_IGNORE += "CVE-2007-4559"	51	CVE_STATUS[CVE-2019-18348] = "not-applicable-config: This is not exploitable when glibc has CVE-2016-10739 fixed"
52	# This is not exploitable when glibc has CVE-2016-10739 fixed.	52	CVE_STATUS[CVE-2020-15523] = "not-applicable-platform: Issue only applies on Windows"
53	CVE_CHECK_IGNORE += "CVE-2019-18348"	53	CVE_STATUS[CVE-2022-26488] = "not-applicable-platform: Issue only applies on Windows"
54	# These are specific to Microsoft Windows
55	CVE_CHECK_IGNORE += "CVE-2020-15523 CVE-2022-26488"
56	# The mailcap module is insecure by design, so this can't be fixed in a meaningful way.
57	# The module will be removed in the future and flaws documented.	54	# The module will be removed in the future and flaws documented.
58	CVE_CHECK_IGNORE += "CVE-2015-20107"	55	CVE_STATUS[CVE-2015-20107] = "upstream-wontfix: The mailcap module is insecure by design, so this can't be fixed in a meaningful way"
59	# Not an issue, in fact expected behaviour	56	# CVE_STATUS[CVE-2023-36632] = "disputed: Not an issue, in fact expected behaviour"
60	CVE_CHECK_IGNORE += "CVE-2023-36632"
61		57
62	PYTHON_MAJMIN = "3.11"	58	PYTHON_MAJMIN = "3.11"
63		59