ghostscript: ignore CVE-2023-38560

The ghostscript recipe isn't vulnerable to CVE-2023-38560, as this is an
issue in the GhostPCL release, whereas this recipe is the Ghostscript
release.

(From OE-Core rev: f82a13beabc784da1455f86064ce9f0f225b6e5a)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Ross Burton
2023-08-07 17:56:56 +01:00
committed by Richard Purdie
parent 4adb195619
commit e6eb540236

View File

@@ -67,3 +67,5 @@ COMPATIBLE_HOST = "^(?!arc).*"
# some entries in NVD uses gpl_ghostscript
CVE_PRODUCT = "ghostscript gpl_ghostscript"
CVE_STATUS[CVE-2023-38560] = "not-applicable-config: PCL isn't part of the Ghostscript release"