]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commitdiff
tiff: remove status for CVE-2023-3164
authorPeter Marko <peter.marko@siemens.com>
Fri, 6 Dec 2024 18:25:12 +0000 (19:25 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 9 Dec 2024 09:17:50 +0000 (09:17 +0000)
We have reached higher version than what NVD marks for fix.
So this explicit status setting is no longer needed.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-multimedia/libtiff/tiff_4.7.0.bb

index 474fe1e8fd9d20d75c461bd23b7ddf7906e83e50..5b318d0621922f92bfd8682c6780424e8e1229ed 100644 (file)
@@ -16,7 +16,6 @@ SRC_URI[sha256sum] = "67160e3457365ab96c5b3286a0903aa6e78bdc44c4bc737d2e486bcecb
 UPSTREAM_CHECK_REGEX = "tiff-(?P<pver>\d+(\.\d+)+).tar"
 
 CVE_STATUS[CVE-2015-7313] = "fixed-version: Tested with check from https://security-tracker.debian.org/tracker/CVE-2015-7313 and already 4.3.0 doesn't have the issue"
-CVE_STATUS[CVE-2023-3164] = "cpe-incorrect: Issue only affects the tiffcrop tool not compiled by default since 4.6.0"
 
 inherit autotools multilib_header