From 04ce4704e603cd66f30ffc001541c6497d84050e Mon Sep 17 00:00:00 2001 From: Daniel Turull Date: Mon, 18 Aug 2025 16:01:02 +0200 Subject: [PATCH] xz: ignore CVE-2024-47611 According to the NVD entry, it is only applicable when built for native Windows (MinGW-w64 or MSVC). Signed-off-by: Daniel Turull Signed-off-by: Steve Sakoman --- meta/recipes-extended/xz/xz_5.4.7.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-extended/xz/xz_5.4.7.bb b/meta/recipes-extended/xz/xz_5.4.7.bb index 563643d4d9..30a4c8e88c 100644 --- a/meta/recipes-extended/xz/xz_5.4.7.bb +++ b/meta/recipes-extended/xz/xz_5.4.7.bb @@ -35,6 +35,8 @@ SRC_URI[sha256sum] = "8db6664c48ca07908b92baedcfe7f3ba23f49ef2476864518ab5db6723 UPSTREAM_CHECK_REGEX = "releases/tag/v(?P\d+(\.\d+)+)" UPSTREAM_CHECK_URI = "https://github.com/tukaani-project/xz/releases/" +CVE_STATUS[CVE-2024-47611] = "not-applicable-platform: Issue only applies on Windows" + CACHED_CONFIGUREVARS += "gl_cv_posix_shell=/bin/sh" inherit autotools gettext ptest -- 2.47.3