]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commitdiff
xserver-xorg: fix CVE-2023-5574 status
authorDmitry Baryshkov <dbaryshkov@gmail.com>
Fri, 19 Jul 2024 17:49:34 +0000 (20:49 +0300)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sun, 21 Jul 2024 10:05:11 +0000 (11:05 +0100)
If XvFB is enabled, the CVE_STATUS for CVE-2023-5574 should be
'unpatched' rather than the empty string. Otherwise SDPX checker
complains:

xserver-xorg-2_21.1.13-r0 do_create_spdx: Unknown CVE status

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-graphics/xorg-xserver/xserver-xorg.inc

index 22f7d9a8adcb774d0b39716f78d1594073c92ea4..e2754426cf1e2ed105e5b526200aee02bedf0106 100644 (file)
@@ -176,4 +176,4 @@ python populate_packages:prepend() {
     d.appendVar("RPROVIDES:" + pn, " " + get_abi("video"))
 }
 
-CVE_STATUS[CVE-2023-5574] = "${@bb.utils.contains('PACKAGECONFIG', 'xvfb', '', 'not-applicable-config: specific to Xvfb', d)}"
+CVE_STATUS[CVE-2023-5574] = "${@bb.utils.contains('PACKAGECONFIG', 'xvfb', 'unpatched', 'not-applicable-config: specific to Xvfb', d)}"