libpcre2: ignore CVE-2022-1586

This CVE is fixed in 10.40
NVD wrongly changed <10.40 to =10.40 when adding debian_linux=10.0

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2022-1586#VulnChangeHistorySection

(From OE-Core rev: 63cbfcd0262d65c66762aa6a8b17b8e8b809737f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
This commit is contained in:
Peter Marko authored and Steve Sakoman committed 2025-02-24 07:00:53 -08:00
1 parent 6f864dc117
commit 0160cb7751
1 file changed
+4
@@ -19,6 +19,10 @@ SRC_URI[sha256sum] = "14e4b83c4783933dc17e964318e6324f7cae1bc75d8f3c79bc6969f00c
CVE_PRODUCT = "pcre2"
# This CVE is fixed in 10.40
# NVD wrongly changed <10.40 to =10.40 when adding debian_linux=10.0
CVE_CHECK_IGNORE += "CVE-2022-1586"
S = "${WORKDIR}/pcre2-${PV}"
PROVIDES += "pcre2"