]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
linux/cve-exclusion: update exclusions after script fixes
authorPeter Marko <peter.marko@siemens.com>
Sun, 27 Apr 2025 09:43:01 +0000 (11:43 +0200)
committerSteve Sakoman <steve@sakoman.com>
Tue, 1 Jul 2025 13:54:01 +0000 (06:54 -0700)
commitf79e2180be8d6190d8a6721ac758537fbd6b3188
tree7b7ec1d012b44b8a89a14c39a465141e5439f1f8
parent4e2c441b64675933cc5f684d0e19cdc18ceaab18
linux/cve-exclusion: update exclusions after script fixes

This will shift fixed version of many CVEs, it does not change status of
any CVE.

Note that the current format of cvelistV5 does not allow us to determine
real value of "fixed_in" without also checking the hashes, but the
result are still fine.
The reason is that many entries are missing original_commit_for_fix
field and thus we see the final "fixed_in" version to be set to backport
to previous branch (e.g. 6.12.23 instead of 6.13).

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 1697404589e2d3a625f9da2e8906e47af668c1c3)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-kernel/linux/cve-exclusion_6.12.inc