]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commitdiff
subversion: ignore CVE-2024-45720
authorPeter Marko <peter.marko@siemens.com>
Wed, 12 Feb 2025 17:38:47 +0000 (18:38 +0100)
committerSteve Sakoman <steve@sakoman.com>
Thu, 27 Feb 2025 14:05:06 +0000 (06:05 -0800)
Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-45720

This CVE is relevant only for subversion running on Windows.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Reviewed-by: Sofiane Hamam <sofiane.hamam@smile.fr>
meta/recipes-devtools/subversion/subversion_1.14.3.bb

index 1cf4e1734bd0fa82e001645a816e8073708f5497..b93c7ee5f8957f073ace259b3b05483bd6640c23 100644 (file)
@@ -18,6 +18,8 @@ inherit autotools pkgconfig gettext python3native
 
 CVE_PRODUCT = "apache:subversion"
 
+CVE_STATUS[CVE-2024-45720] = "not-applicable-platform: Issue only applies on Windows"
+
 PACKAGECONFIG ?= ""
 
 PACKAGECONFIG[boost] = "--with-boost=${RECIPE_SYSROOT}${exec_prefix},--without-boost,boost"