linux-yocto: Exclude 294 CVEs already fixed upstream

Exclude CVEs that are fixed in current linux-yocto version v5.4.237.

To get the commit fixing a CVE, I used the Debian kernel-sec repo [1].

[1]: 86d5040aee

(From OE-Core rev: ec0f3e5869c596a308a164f93cb031e04034a8ed)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
This commit is contained in:
Yoann Congal
2023-05-11 19:36:52 +02:00
committed by Steve Sakoman
parent f5051dae9f
commit 397d3430bf
2 changed files with 1843 additions and 0 deletions

File diff suppressed because it is too large Load Diff

View File

@@ -56,3 +56,6 @@ do_install_append(){
# enable kernel-sample for oeqa/runtime/cases's ksample.py test
KERNEL_FEATURES_append_qemuall=" features/kernel-sample/kernel-sample.scc"
# CVE exclusion
include recipes-kernel/linux/cve-exclusion.inc