mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-07-26 19:47:17 +00:00
gnome-settings-daemon: ignore CVE-2024-38394
Details: https://nvd.nist.gov/vuln/detail/CVE-2024-38394 The CVE has the disputed flag. The project maintainers claim that the issue is not in gnome-setttings-daemon. If the vulnerability needs to be handled in gnome-settings-daemon, than it is a new feature rather than a vulnerability fix. Due to this, ignore this CVE. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This commit is contained in:
@@ -44,3 +44,6 @@ FILES:${PN} += " \
|
|||||||
${systemd_user_unitdir} \
|
${systemd_user_unitdir} \
|
||||||
${libdir}/gnome-settings-daemon-42/libgsd.so \
|
${libdir}/gnome-settings-daemon-42/libgsd.so \
|
||||||
"
|
"
|
||||||
|
|
||||||
|
# mitigation would be a new feature, not a CVE
|
||||||
|
CVE_CHECK_IGNORE += "CVE-2024-38394"
|
||||||
|
|||||||
Reference in New Issue
Block a user