]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commitdiff
python3: ignore disputed CVE-2023-36632
authorRoss Burton <ross.burton@arm.com>
Mon, 21 Aug 2023 13:32:18 +0000 (14:32 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 22 Aug 2023 14:13:51 +0000 (15:13 +0100)
For some reason in the migration of CVE_CHECK_IGNORE to CVE_STATUS[1], this
CVE was commented out.

[1] oe-core 1634ed40

(From OE-Core rev: 07deefea29169ba8d663c869f26b31d3f37a1c9f)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-devtools/python/python3_3.11.4.bb

index b3534ad678e8f6d113d5910294c0921e7a3a2abc..8fd1382caa4c72f2f9e2f5c6ca47150c0b06af2a 100644 (file)
@@ -53,7 +53,7 @@ CVE_STATUS[CVE-2020-15523] = "not-applicable-platform: Issue only applies on Win
 CVE_STATUS[CVE-2022-26488] = "not-applicable-platform: Issue only applies on Windows"
 # The module will be removed in the future and flaws documented.
 CVE_STATUS[CVE-2015-20107] = "upstream-wontfix: The mailcap module is insecure by design, so this can't be fixed in a meaningful way"
-CVE_STATUS[CVE-2023-36632] = "disputed: Not an issue, in fact expected behaviour"
+CVE_STATUS[CVE-2023-36632] = "disputed: Not an issue, in fact expected behaviour"
 
 PYTHON_MAJMIN = "3.11"