From 4c8dec585a3e634da03c5f2543c8cabeffcfbe2f Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Mon, 13 Apr 2026 20:02:25 +0200 Subject: [PATCH] minio: ignore irrelevant CVEs Details: https://nvd.nist.gov/vuln/detail/CVE-2026-33419 https://nvd.nist.gov/vuln/detail/CVE-2026-34204 These CVEs were filed against minio server, but this recipe is for minio client tools, which is a related, but different project. Ignore these CVEs. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj --- meta-oe/recipes-extended/minio/minio_git.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-oe/recipes-extended/minio/minio_git.bb b/meta-oe/recipes-extended/minio/minio_git.bb index 511dd4d869..d08b5e754d 100644 --- a/meta-oe/recipes-extended/minio/minio_git.bb +++ b/meta-oe/recipes-extended/minio/minio_git.bb @@ -169,4 +169,4 @@ CVE_STATUS_GROUPS += "CVE_STATUS_WRONG_CPE" CVE_STATUS_WRONG_CPE[status] = "cpe-incorrect: The vulnerability is in minio server, not in minio client-tools" CVE_STATUS_WRONG_CPE = "CVE-2018-1000538 CVE-2020-11012 CVE-2021-21287 CVE-2021-21362 \ CVE-2021-21390 CVE-2021-43858 CVE-2022-35919 CVE-2023-28433 \ - CVE-2023-28434 CVE-2024-36107" + CVE-2023-28434 CVE-2024-36107 CVE-2026-33419 CVE-2026-34204"