From: Peter Marko Date: Thu, 10 Apr 2025 17:28:34 +0000 (+0200) Subject: systemd: ignore CVEs which reappeared after upgrade to 250.14 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b86129da823c55a3e08ee72c99675301948949f8;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git systemd: ignore CVEs which reappeared after upgrade to 250.14 Upgrade from 250.5 to 250.14 removed patches for these CVEs because they were interated in the new version. However NVD DB does not contain information about these backports to v250 branch, so they need to be ignored. Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- diff --git a/meta/recipes-core/systemd/systemd.inc b/meta/recipes-core/systemd/systemd.inc index 86ae4793c3..70ba1d1f77 100644 --- a/meta/recipes-core/systemd/systemd.inc +++ b/meta/recipes-core/systemd/systemd.inc @@ -19,3 +19,6 @@ SRCBRANCH = "v250-stable" SRC_URI = "git://github.com/systemd/systemd-stable.git;protocol=https;branch=${SRCBRANCH}" S = "${WORKDIR}/git" + +# cpe-stable-backport: patches were backported to v250 stable branch +CVE_CHECK_IGNORE += "CVE-2022-3821 CVE-2022-4415 CVE-2022-45873"