From 823f7ab85cff010c777616ed5db0e0c41f6cc4e6 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Sun, 1 Dec 2024 19:53:36 +0100 Subject: [PATCH] grub: ignore CVE-2024-1048 and CVE-2023-4001 Same was done in newer Yocto releases. See commit: f99b25355133fe8f65a55737270e67ea10b79d52 See commit: 40cd768368167f81de5bb55e9ff0584035f4c1b4 Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- meta/recipes-bsp/grub/grub2.inc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-bsp/grub/grub2.inc b/meta/recipes-bsp/grub/grub2.inc index 2718379474a..3e96426b82d 100644 --- a/meta/recipes-bsp/grub/grub2.inc +++ b/meta/recipes-bsp/grub/grub2.inc @@ -49,6 +49,8 @@ SRC_URI[sha256sum] = "23b64b4c741569f9426ed2e3d0e6780796fca081bee4c99f62aa3f53ae CVE_CHECK_IGNORE += "CVE-2019-14865" # Applies only to SUSE CVE_CHECK_IGNORE += "CVE-2021-46705" +# not-applicable-platform: Applies only to RHEL/Fedora +CVE_CHECK_IGNORE += "CVE-2024-1048 CVE-2023-4001" DEPENDS = "flex-native bison-native gettext-native" -- 2.47.3