From d07ae6a5c814ec0307d770f7e867118860db4c89 Mon Sep 17 00:00:00 2001 From: Ninette Adhikari Date: Thu, 25 Dec 2025 13:51:33 +0100 Subject: [PATCH] mpd: Update status for CVE-2020-7465 and CVE-2020-7466 The recipe used in the `meta-openembedded` is a different mpd package compared to the one which has the CVE issue. Package used in `meta-embedded`: http://www.musicpd.org Package with CVE issue: https://sourceforge.net/projects/mpd/ No action required. Signed-off-by: Ninette Adhikari Signed-off-by: Khem Raj (cherry picked from commit 3e3c25698124dd82163d966fa9d7e7e807cfecbe) Adapted to Kirkstone (CVE_STATUS -> CVE_CHECK_IGNORE) Signed-off-by: Gyorgy Sarvari --- meta-multimedia/recipes-multimedia/musicpd/mpd_0.23.12.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-multimedia/recipes-multimedia/musicpd/mpd_0.23.12.bb b/meta-multimedia/recipes-multimedia/musicpd/mpd_0.23.12.bb index 0b4e9e3df1..8b9e938f8d 100644 --- a/meta-multimedia/recipes-multimedia/musicpd/mpd_0.23.12.bb +++ b/meta-multimedia/recipes-multimedia/musicpd/mpd_0.23.12.bb @@ -99,3 +99,6 @@ USERADD_PARAM:${PN} = " \ --home ${localstatedir}/lib/mpd \ --groups audio \ --user-group mpd" + +# cpe-incorrect: The recipe used in the meta-openembedded is a different mpd package compared to the one which has the CVE issue. +CVE_CHECK_IGNORE += "CVE-2020-7465 CVE-2020-7466"