From 6cac0cf4fef6aeb9d0584809a40774bc5895b635 Mon Sep 17 00:00:00 2001 From: Peter Marko <peter.marko@siemens.com> Date: Wed, 23 Oct 2024 23:24:39 +0200 Subject: [PATCH] python3: ignore fixed CVEs These CVEs were fixed in 3.10.15 Commit 487e8cdf1df6feba6d88fa29e11791f4ebaaa362 removed patches in favor of version upgrade, which caused the CVEs to re-appear in reports. (From OE-Core rev: 2cf10084c56c83da3deff4e65e619afab80e08e1) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> --- meta/recipes-devtools/python/python3_3.10.15.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/python/python3_3.10.15.bb b/meta/recipes-devtools/python/python3_3.10.15.bb index 4157b8cb837..0eb619dfa2f 100644 --- a/meta/recipes-devtools/python/python3_3.10.15.bb +++ b/meta/recipes-devtools/python/python3_3.10.15.bb @@ -63,6 +63,8 @@ CVE_CHECK_IGNORE += "CVE-2020-15523 CVE-2022-26488" CVE_CHECK_IGNORE += "CVE-2015-20107" # Not an issue, in fact expected behaviour CVE_CHECK_IGNORE += "CVE-2023-36632" +# Fixes are included in 3.10.15 +CVE_CHECK_IGNORE += "CVE-2023-27043 CVE-2024-6232 CVE-2024-7592" PYTHON_MAJMIN = "3.10" -- GitLab