MIRRORS/poky
1
0
Fork 0
mirror of git://git.yoctoproject.org/poky.git synced 2025-07-19 12:59:02 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity

cve-exclusions: correct cve status for 5 entries

Browse Source 
In commit 8a7af09feb the CVE_STATUS was copy from the old data
for 6.6 kernel, which had backport information.
Correcting status to when the fix was introduced and adding
references to the fixes.

Fixes: 8a7af09febc28477094de0999ab6321d910811b2
Reported-by: Peter Marko <Peter.Marko@siemens.com>
(From OE-Core rev: fc3e32bc4cf79ddce0eb9fa409656de4dc0e00ea)

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Daniel Turull 2025-04-26 18:19:29 +02:00 committed by Richard Purdie
parent 3f1aa58463
commit 573c7b54e6
1 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
meta/recipes-kernel/linux/cve-exclusion.inc
View File

@ -141,12 +141,17 @@ CVE_STATUS[CVE-2023-4155] = "fixed-version: Fixed from version 6.5rc6"
CVE_STATUS[CVE-2023-6176] = "fixed-version: Fixed from version 6.6rc2"
CVE_STATUS[CVE-2023-6270] = "cpe-stable-backport: Backported in 6.6.23"
# Fix https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f98364e926626c678fb4b9004b75cacf92ff0662
CVE_STATUS[CVE-2023-6270] = "fixed-version: Fixed from 6.9"
CVE_STATUS[CVE-2023-6610] = "cpe-stable-backport: Backported in 6.6.13"
# Fix https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=567320c46a60a3c39b69aa1df802d753817a3f86
CVE_STATUS[CVE-2023-6610] = "fixed-version: Fixed from 6.7rc7"
CVE_STATUS[CVE-2023-6679] = "fixed-version: only affects 6.7rc1 onwards"
#Fix https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=65c95f78917ea6fa7ff189a2c19879c4fe161873
CVE_STATUS[CVE-2023-6679] = "fixed-version: Fixed from 6.7rc6"
CVE_STATUS[CVE-2023-7042] = "cpe-stable-backport: Backported in 6.6.23"
#Fix https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=ad25ee36f00172f7d53242dc77c69fff7ced0755
CVE_STATUS[CVE-2023-7042] = "fixed-version: Fixed from 6.9rc1"
CVE_STATUS[CVE-2024-0193] = "cpe-stable-backport: Backported in 6.6.10"
#Fix https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=7315dc1e122c85ffdfc8defffbb8f8b616c2eb1a
CVE_STATUS[CVE-2024-0193] = "fixed-version: Fixed from 6.7"