]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
linux: add CVE_STATUS for a chrome* bug
authorRandy MacLeod <Randy.MacLeod@windriver.com>
Thu, 15 May 2025 19:05:23 +0000 (15:05 -0400)
committerSteve Sakoman <steve@sakoman.com>
Tue, 1 Jul 2025 13:55:57 +0000 (06:55 -0700)
commit8c39f6fa4454147e22d5e386046ed9b1076d7a95
treecd2fa149ecd3b964e4848bd4aa69601b6ac6153c
parentd4366d4c9ab13da4d03e8893db0efdef9b853e13
linux: add CVE_STATUS for a chrome* bug

This is not a linux-yocto CVE yet it shows up in the reports as:
   linux-yocto-custom CVE-2023-3079  0.0  8.8  Unpatched  https://nvd.nist.gov/vuln/detail/CVE-2023-3079

For reference, the CPE says:
  Affects cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
So affects all Linux systems,
  Running on/with cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

[ YOCTO #15780 ]

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
(cherry picked from commit 22ef4d2d116afb9d603a05fb107dd9da0e74558b)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-kernel/linux/cve-exclusion.inc