]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
linux/cve-exclusion: update exclusions after script fixes
authorPeter Marko <peter.marko@siemens.com>
Sun, 27 Apr 2025 09:43:01 +0000 (11:43 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 29 Apr 2025 08:54:15 +0000 (09:54 +0100)
commit1697404589e2d3a625f9da2e8906e47af668c1c3
tree640df24bc278d44088846687b4aba982add1eb19
parent68f8e58a249c8adef18e63f0841e8bfea16f354e
linux/cve-exclusion: update exclusions after script fixes

This will shift fixed version of many CVEs, it does not change status of
any CVE.

Note that the current format of cvelistV5 does not allow us to determine
real value of "fixed_in" without also checking the hashes, but the
result are still fine.
The reason is that many entries are missing original_commit_for_fix
field and thus we see the final "fixed_in" version to be set to backport
to previous branch (e.g. 6.12.23 instead of 6.13).

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-kernel/linux/cve-exclusion_6.12.inc