gnome-settings-daemon: ignore CVE-2024-38394

Details: https://nvd.nist.gov/vuln/detail/CVE-2024-38394

The CVE has the disputed flag. The project maintainers claim that the issue
is not in gnome-setttings-daemon. If the vulnerability needs to be handled
in gnome-settings-daemon, than it is a new feature rather than a vulnerability fix.

Due to this, ignore this CVE.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This commit is contained in:
Gyorgy Sarvari committed 2026-01-30 18:59:29 +01:00
1 parent bcac2eef54
commit 702efc091e
1 file changed
+3
@@ -44,3 +44,6 @@ FILES:${PN} += " \
${systemd_user_unitdir} \
${libdir}/gnome-settings-daemon-42/libgsd.so \
"
# mitigation would be a new feature, not a CVE
CVE_CHECK_IGNORE += "CVE-2024-38394"