From: Virendra Thakur Date: Tue, 1 Apr 2025 08:27:45 +0000 (+0530) Subject: rust-cross-canadian: Set CVE_STATUS ignore for CVE-2024-43402 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ef2ba1f04f6f21530dc4efe5c4f61cbb0c76c032;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git rust-cross-canadian: Set CVE_STATUS ignore for CVE-2024-43402 This CVE was created because fix for CVE-2024-24576 was incomplete. Ignore the new CVE in the same way as the old one. See https://nvd.nist.gov/vuln/detail/CVE-2024-43402 As per NVD, this CVE only affects to Windows platform Reference: https://git.yoctoproject.org/meta-lts-mixins/commit/?h=scarthgap/rust&id=13f045acf6388d1e320fd4c0f3ca19ca7a75ef44 Signed-off-by: Virendra Thakur Signed-off-by: Steve Sakoman --- diff --git a/meta/recipes-devtools/rust/rust-cross-canadian.inc b/meta/recipes-devtools/rust/rust-cross-canadian.inc index dbf997560b..ac5f6bd57c 100644 --- a/meta/recipes-devtools/rust/rust-cross-canadian.inc +++ b/meta/recipes-devtools/rust/rust-cross-canadian.inc @@ -15,6 +15,10 @@ SRC_URI += "file://target-rust-ccld.c" LIC_FILES_CHKSUM = "file://target-rust-ccld.c;md5=af4e0e29f81a34cffe05aa07c89e93e9;endline=7" S = "${WORKDIR}" +# As per NVD, this CVE only affects to Windows platform +# Link: https://nvd.nist.gov/vuln/detail/CVE-2024-43402 +CVE_STATUS[CVE-2024-43402] = "not-applicable-platform: Issue only applies on Windows" + # Need to use our SDK's sh here, see #14878 create_sdk_wrapper () { file="$1"