From 3600a4b28e3e39a36e7d4527b3b26a5740b63f6c Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Tue, 31 Dec 2024 22:25:10 +0100 Subject: [PATCH] gstreame1.0: ignore CVEs from gstreamer1.0-plugins-bad These CVEs are patched in gstreamer1.0-plugins-bad. CPE for gstreamer-plugins-bad mostly hits original gstreamer recipe. (From OE-Core rev: a2339d124c2561bf157f3e14af0b3152d257d937) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- meta/recipes-multimedia/gstreamer/gstreamer1.0_1.20.7.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.20.7.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.20.7.bb index 2c9c6944b0..cf81620833 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.20.7.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.20.7.bb @@ -69,7 +69,7 @@ FILES:${PN}-dbg += "${datadir}/gdb ${datadir}/gstreamer-1.0/gdb" CVE_PRODUCT = "gstreamer" -# this CVE is patched in gstreamer1.0-plugins-bad -CVE_CHECK_IGNORE += "CVE-2024-0444" +# these CVEs are patched in gstreamer1.0-plugins-bad +CVE_CHECK_IGNORE += "CVE-2023-40474 CVE-2023-40475 CVE-2023-40476 CVE-2023-44429 CVE-2023-44446 CVE-2023-50186 CVE-2024-0444" PTEST_BUILD_HOST_FILES = ""