mirror of
https://git.yoctoproject.org/poky
synced 2026-04-21 12:32:15 +02:00
4839ceefde
CVE patch [1] aplies only on main branch which is base for 1.2.x.
Branch 1.1 has a different initial commit and does not contain
vulnerable code where the CVE patch applies.
Also Debian [2] marked 1.1 as not vulnerable.
[1] 5665f86b8f
[2] https://security-tracker.debian.org/tracker/CVE-2024-56431
(From OE-Core rev: b9d75be7bc2eaa88a280d52ee0fff322e56d52e2)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Picked from scarthgap commit 07f35d022b88ab4d297d0252f9909e252b7e4cfe
Reworked from CVE_STATUS to CVE_CHECK_IGNORE
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>