]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commitdiff
go: ignore CVE-2024-24790
authorHitendra Prajapati <hprajapati@mvista.com>
Thu, 11 Sep 2025 12:11:03 +0000 (17:41 +0530)
committerSteve Sakoman <steve@sakoman.com>
Fri, 12 Sep 2025 16:41:25 +0000 (09:41 -0700)
CVE-2024-24790:  net/netip module was introduced in go1.18beta1 via a59e33224e42d60a97fa720a45e1b74eb6aaa3d0

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-devtools/go/go-1.17.13.inc

index 36356349d2d3837d0a22529761b3d60691dc340b..b17853035bb27e52fa22d239634237b940d0ddb4 100644 (file)
@@ -70,7 +70,8 @@ SRC_URI[main.sha256sum] = "a1a48b23afb206f95e7bbaa9b898d965f90826f6f1d1fc0c1d784
 # Upstream don't believe it is a signifiant real world issue and will only
 # fix in 1.17 onwards where we can drop this.
 # https://github.com/golang/go/issues/30999#issuecomment-910470358
-CVE_CHECK_IGNORE += "CVE-2021-29923"
+# CVE-2024-24790:  net/netip module was introduced in go1.18beta1 via a59e33224e42d60a97fa720a45e1b74eb6aaa3d0
+CVE_CHECK_IGNORE += "CVE-2021-29923 CVE-2024-24790"
 
 # This are specific to Microsoft Windows
 CVE_CHECK_IGNORE += "CVE-2022-41716 CVE-2023-45283 CVE-2023-45284 CVE-2025-0913"