From: Changqing Li Date: Mon, 4 Sep 2023 02:09:47 +0000 (+0800) Subject: sqlite3: set CVE_STATUS for CVE-2023-36191 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=34874433c1e6c9e21d45d9ba686e4bb15479659d;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git sqlite3: set CVE_STATUS for CVE-2023-36191 The error is a bug. It has been fixed upstream. But it is not a vulnerability. You may safely ignore the CVE. Refer: [1] https://www.sqlite.org/forum/forumpost/19f55ef73b Signed-off-by: Changqing Li Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie --- diff --git a/meta/recipes-support/sqlite/sqlite3_3.43.0.bb b/meta/recipes-support/sqlite/sqlite3_3.43.0.bb index e6d7bb9cd5b..84644a09e67 100644 --- a/meta/recipes-support/sqlite/sqlite3_3.43.0.bb +++ b/meta/recipes-support/sqlite/sqlite3_3.43.0.bb @@ -6,3 +6,5 @@ LIC_FILES_CHKSUM = "file://sqlite3.h;endline=11;md5=786d3dc581eff03f4fd9e4a77ed0 SRC_URI = "http://www.sqlite.org/2023/sqlite-autoconf-${SQLITE_PV}.tar.gz" SRC_URI[sha256sum] = "49008dbf3afc04d4edc8ecfc34e4ead196973034293c997adad2f63f01762ae1" +CVE_STATUS[CVE-2023-36191] = "disputed: The error is a bug. It has been fixed upstream. But it is not a vulnerability" +