mirror of
https://git.yoctoproject.org/poky
synced 2026-04-30 03:32:12 +02:00
ghostscript: ignore CVE-2023-38560
The ghostscript recipe isn't vulnerable to CVE-2023-38560, as this is an issue in the GhostPCL release, whereas this recipe is the Ghostscript release. (From OE-Core rev: f82a13beabc784da1455f86064ce9f0f225b6e5a) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
4adb195619
commit
e6eb540236
@@ -67,3 +67,5 @@ COMPATIBLE_HOST = "^(?!arc).*"
|
||||
|
||||
# some entries in NVD uses gpl_ghostscript
|
||||
CVE_PRODUCT = "ghostscript gpl_ghostscript"
|
||||
|
||||
CVE_STATUS[CVE-2023-38560] = "not-applicable-config: PCL isn't part of the Ghostscript release"
|
||||
|
||||
Reference in New Issue
Block a user