From b86129da823c55a3e08ee72c99675301948949f8 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Thu, 10 Apr 2025 19:28:34 +0200 Subject: [PATCH] systemd: ignore CVEs which reappeared after upgrade to 250.14 Upgrade from 250.5 to 250.14 removed patches for these CVEs because they were interated in the new version. However NVD DB does not contain information about these backports to v250 branch, so they need to be ignored. Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- meta/recipes-core/systemd/systemd.inc | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-core/systemd/systemd.inc b/meta/recipes-core/systemd/systemd.inc index 86ae4793c3..70ba1d1f77 100644 --- a/meta/recipes-core/systemd/systemd.inc +++ b/meta/recipes-core/systemd/systemd.inc @@ -19,3 +19,6 @@ SRCBRANCH = "v250-stable" SRC_URI = "git://github.com/systemd/systemd-stable.git;protocol=https;branch=${SRCBRANCH}" S = "${WORKDIR}/git" + +# cpe-stable-backport: patches were backported to v250 stable branch +CVE_CHECK_IGNORE += "CVE-2022-3821 CVE-2022-4415 CVE-2022-45873" -- 2.47.2