mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-05-09 17:59:26 +00:00
minio: ignore irrelevant CVEs
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-33419 https://nvd.nist.gov/vuln/detail/CVE-2026-34204 These CVEs were filed against minio server, but this recipe is for minio client tools, which is a related, but different project. Ignore these CVEs. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
@@ -169,4 +169,4 @@ CVE_STATUS_GROUPS += "CVE_STATUS_WRONG_CPE"
|
||||
CVE_STATUS_WRONG_CPE[status] = "cpe-incorrect: The vulnerability is in minio server, not in minio client-tools"
|
||||
CVE_STATUS_WRONG_CPE = "CVE-2018-1000538 CVE-2020-11012 CVE-2021-21287 CVE-2021-21362 \
|
||||
CVE-2021-21390 CVE-2021-43858 CVE-2022-35919 CVE-2023-28433 \
|
||||
CVE-2023-28434 CVE-2024-36107"
|
||||
CVE-2023-28434 CVE-2024-36107 CVE-2026-33419 CVE-2026-34204"
|
||||
|
||||
Reference in New Issue
Block a user