summaryrefslogtreecommitdiffstats
path: root/meta/recipes-core/glibc
diff options
context:
space:
mode:
authorValek Andrej <andrej.v@skyrain.eu>2024-02-01 14:24:01 -0800
committerRichard Purdie <richard.purdie@linuxfoundation.org>2024-02-06 10:31:25 +0000
commitbea91fb120fef012c1501d470f85ee60a672d1e3 (patch)
tree39ff7597b61c2a5114db93e288a6d196e42ada05 /meta/recipes-core/glibc
parent41ee98ea7e029515a94835952b8563097150f456 (diff)
downloadopenembedded-core-bea91fb120fef012c1501d470f85ee60a672d1e3.tar.gz
glibc: Refresh CVE status w.r.t 2.39 release
- drop irrelevant CVEs for 2.39 release Signed-off-by: Valek Andrej <andrej.v@skyrain.eu> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-core/glibc')
-rw-r--r--meta/recipes-core/glibc/glibc-version.inc5
-rw-r--r--meta/recipes-core/glibc/glibc_2.39.bb2
2 files changed, 0 insertions, 7 deletions
diff --git a/meta/recipes-core/glibc/glibc-version.inc b/meta/recipes-core/glibc/glibc-version.inc
index 848648b599..a35c7b28a7 100644
--- a/meta/recipes-core/glibc/glibc-version.inc
+++ b/meta/recipes-core/glibc/glibc-version.inc
@@ -7,9 +7,4 @@ GLIBC_GIT_URI ?= "git://sourceware.org/git/glibc.git;protocol=https"
UPSTREAM_CHECK_GITTAGREGEX = "(?P<pver>\d+\.\d+(\.(?!90)\d+)*)"
-CVE_STATUS[CVE-2023-4527] = "fixed-version: Fixed in stable branch updates"
CVE_STATUS[CVE-2023-4911] = "fixed-version: Fixed in stable branch updates"
-CVE_STATUS[CVE-2023-4806] = "fixed-version: Fixed in stable branch updates"
-CVE_STATUS[CVE-2023-5156] = "fixed-version: Fixed in stable branch updates"
-CVE_STATUS[CVE-2023-4527] = "fixed-version: Fixed in stable branch updates"
-CVE_STATUS[CVE-2023-0687] = "fixed-version: Fixed in stable branch updates"
diff --git a/meta/recipes-core/glibc/glibc_2.39.bb b/meta/recipes-core/glibc/glibc_2.39.bb
index 0273be713f..577ff1ad2c 100644
--- a/meta/recipes-core/glibc/glibc_2.39.bb
+++ b/meta/recipes-core/glibc/glibc_2.39.bb
@@ -16,8 +16,6 @@ CVE_STATUS[CVE-2019-1010025] = "disputed: \
Allows for ASLR bypass so can bypass some hardening, not an exploit in itself, may allow \
easier access for another. 'ASLR bypass itself is not a vulnerability.'"
-CVE_STATUS[CVE-2023-25139] = "cpe-stable-backport: This is integrated into the 2.37 branch as of 07b9521fc6"
-
DEPENDS += "gperf-native bison-native"
NATIVESDKFIXES ?= ""