]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commitdiff
linux-yocto_6.1: ignore backported CVEs
authorRoss Burton <ross.burton@arm.com>
Fri, 14 Jul 2023 14:53:18 +0000 (15:53 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 19 Jul 2023 18:37:35 +0000 (19:37 +0100)
These CVEs have all been fixed in 6.1 point releases.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-kernel/linux/cve-exclusion_6.1.inc

index 49b4159b347153a0aa2553d052f211544a560987..6a0bd19447c0299f7d2080d253739bf9a1194685 100644 (file)
@@ -542,6 +542,12 @@ CVE_CHECK_IGNORE += "CVE-2023-2235"
 # Fixed in 6.1.16
 CVE_CHECK_IGNORE += "CVE-2023-2985"
 
+# Backported to 6.1.30
+CVE_CHECK_IGNORE += "CVE-2023-3090"
+
+# Backported to 6.1.35
+CVE_CHECK_IGNORE += "CVE-2023-3117"
+
 # Backported to 6.1.30 as 9a342d4
 CVE_CHECK_IGNORE += "CVE-2023-3141"
 
@@ -560,6 +566,18 @@ CVE_CHECK_IGNORE += "CVE-2023-3220"
 # Backported to 6.1.28
 CVE_CHECK_IGNORE += "CVE-2023-3268"
 
+# Backported to 6.1.9
+CVE_CHECK_IGNORE += "CVE-2023-3358"
+
+# Backported to 6.1.11
+CVE_CHECK_IGNORE += "CVE-2023-3359"
+
+# Backported to 6.1.36
+CVE_CHECK_IGNORE += "CVE-2023-3389"
+
+# Backported to 6.1.35
+CVE_CHECK_IGNORE += "CVE-2023-3390"
+
 # https://nvd.nist.gov/vuln/detail/CVE-2023-23005
 # Introduced in version v6.1 7b88bda3761b95856cf97822efe8281c8100067b
 # Patched in kernel since v6.2 4a625ceee8a0ab0273534cb6b432ce6b331db5ee