linuxptp: ignore CVE-2024-42861

Details: https://nvd.nist.gov/vuln/detail/CVE-2024-42861

The vulnerability report is considered to be bogus and a non-issue
(or at least not a security issue) by upstream[1] and by major
Linux distros[2][3][4].

[1]: https://lists.nwtime.org/sympa/arc/linuxptp-devel/2024-09/msg00080.html
[2]: Ubuntu: https://ubuntu.com/security/CVE-2024-42861
[3]: Debian: https://security-tracker.debian.org/tracker/CVE-2024-42861
[4]: Suse: https://bugzilla.suse.com/show_bug.cgi?id=1230935

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This commit is contained in:
Gyorgy Sarvari
2025-11-15 19:29:34 +01:00
parent 3693ee5670
commit 7590de304a
@@ -30,3 +30,6 @@ PACKAGES =+ "${PN}-configs"
FILES:${PN}-configs = "${docdir}"
FILES:${PN}-doc = "${mandir}"
# disputed: Considered to be bogus by upstream and major distros
CVE_CHECK_IGNORE += "CVE-2024-42861"