From 3a59d89765bc386bf182620ea31d88dc96afc981 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Mon, 22 Dec 2025 21:27:28 +0100 Subject: [PATCH] accountservice: ignore CVE-2023-3297 Details: https://nvd.nist.gov/vuln/detail/CVE-2023-3297 The vulnerability is triggered by a patch added by Ubuntu, and the vulnerable patch is not present in the recipe. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit 071a45c9d76c9a222c8fbaa50089a8af44f44e74) Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal --- .../recipes-support/accountsservice/accountsservice_22.08.8.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-gnome/recipes-support/accountsservice/accountsservice_22.08.8.bb b/meta-gnome/recipes-support/accountsservice/accountsservice_22.08.8.bb index 439958c7d2..d63e3bd34c 100644 --- a/meta-gnome/recipes-support/accountsservice/accountsservice_22.08.8.bb +++ b/meta-gnome/recipes-support/accountsservice/accountsservice_22.08.8.bb @@ -30,3 +30,5 @@ FILES:${PN} += " \ ${datadir}/dbus-1 \ ${datadir}/polkit-1 \ " + +CVE_STATUS[CVE-2023-3297] = "not-applicable-platform: The vulnerability is Ubuntu specific"