From f10f9c3a8d2c17d5a6c3f0b00749e5b34a66e090 Mon Sep 17 00:00:00 2001 From: Khem Raj Date: Sun, 11 Aug 2024 08:55:15 -0700 Subject: [PATCH] gnupg: Document CVE-2022-3219 and mark wontfix Signed-off-by: Khem Raj Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie --- meta/recipes-support/gnupg/gnupg_2.4.5.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-support/gnupg/gnupg_2.4.5.bb b/meta/recipes-support/gnupg/gnupg_2.4.5.bb index 99996968b1a..97b5d8856c0 100644 --- a/meta/recipes-support/gnupg/gnupg_2.4.5.bb +++ b/meta/recipes-support/gnupg/gnupg_2.4.5.bb @@ -88,3 +88,4 @@ BBCLASSEXTEND = "native nativesdk" lcl_maybe_fortify:mipsarch = "" +CVE_STATUS[CVE-2022-3219] = "upstream-wontfix: Upstream doesn't seem to be keen on merging the proposed commit - https://dev.gnupg.org/T5993" -- 2.47.3