]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commitdiff
cve-extra-exclusions: remove BlueZ issues
authorRoss Burton <ross.burton@arm.com>
Mon, 4 Sep 2023 16:03:35 +0000 (17:03 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 5 Sep 2023 07:09:11 +0000 (08:09 +0100)
These BlueZ issues were mislabelled as Linux issues, but now that the
CPE data is accurate this ignore can be removed.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/conf/distro/include/cve-extra-exclusions.inc

index 84217e4acdebcb69df235bd263abd1c43fc0a762..51926f342a189f810730c2446c5836e1a78ab1dc 100644 (file)
@@ -74,11 +74,6 @@ CVE_STATUS_KERNEL_HISTORIC = "CVE-1999-0524 CVE-1999-0656 CVE-2006-2932 CVE-2007
 CVE_STATUS_KERNEL_HISTORIC[status] = "ignored"
 
 
-# https://nvd.nist.gov/vuln/detail/CVE-2022-3563
-# https://nvd.nist.gov/vuln/detail/CVE-2022-3637
-CVE_STATUS[CVE-2022-3563] = "cpe-incorrect: This issue do not affect the kernel, patchs listed on CVE pages links to https://git.kernel.org/pub/scm/bluetooth/bluez.git"
-CVE_STATUS[CVE-2022-3637] = "cpe-incorrect: This issue do not affect the kernel, patchs listed on CVE pages links to https://git.kernel.org/pub/scm/bluetooth/bluez.git"
-
 # qemu:qemu-native:qemu-system-native https://nvd.nist.gov/vuln/detail/CVE-2021-20255
 CVE_STATUS[CVE-2021-20255] = "upstream-wontfix: \
 There was a proposed patch https://lists.gnu.org/archive/html/qemu-devel/2021-02/msg06098.html \