From 53e8f46ff72e3b8d74d1c4c0a8d5b98282fd22d5 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Sun, 8 Mar 2026 20:11:27 +0100 Subject: [PATCH] redis: remove unneeded CVE_STATUS tags These CVEs were ignored because they were tracked by NVD using incorrect version information. Since then this information seems to be reflected correctly, it is not needed to ignore them explicitly. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj --- meta-oe/recipes-extended/redis/redis_8.0.6.bb | 5 ----- 1 file changed, 5 deletions(-) diff --git a/meta-oe/recipes-extended/redis/redis_8.0.6.bb b/meta-oe/recipes-extended/redis/redis_8.0.6.bb index 6787f42350..9a947c075d 100644 --- a/meta-oe/recipes-extended/redis/redis_8.0.6.bb +++ b/meta-oe/recipes-extended/redis/redis_8.0.6.bb @@ -20,12 +20,7 @@ SRC_URI[sha256sum] = "6d0a9913887a4972536f9da226f1575859c34d86354129163260a5f9c6 RPROVIDES:${PN} = "virtual-redis" -CVE_STATUS[CVE-2025-21605] = "cpe-incorrect: the used version already contains the fix" -CVE_STATUS[CVE-2025-27151] = "cpe-incorrect: the used version already contains the fix" CVE_STATUS[CVE-2025-46686] = "disputed: upstream rejected because mitigating it would affect other functionality" -CVE_STATUS[CVE-2025-46817] = "cpe-incorrect: the used version already contains the fix" -CVE_STATUS[CVE-2025-46818] = "cpe-incorrect: the used version already contains the fix" -CVE_STATUS[CVE-2025-46819] = "cpe-incorrect: the used version already contains the fix" inherit pkgconfig update-rc.d systemd useradd