mirror of
https://git.yoctoproject.org/poky
synced 2026-05-08 17:19:20 +00:00
linux-yocto/6.6: update CVE exclusions
Data pulled from: https://github.com/nluedtke/linux_kernel_cves 1/1 [ Author: Nicholas Luedtke Email: nicholas.luedtke@uwalumni.com Subject: Update 15Jan24 Date: Mon, 15 Jan 2024 12:48:45 -0500 ] (From OE-Core rev: 2c6dbaef795e65a94c7f3ac54be5d0414e5e213c) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
d478043f67
commit
7c54332e05
@@ -1,9 +1,9 @@
|
||||
|
||||
# Auto-generated CVE metadata, DO NOT EDIT BY HAND.
|
||||
# Generated at 2024-01-11 15:23:15.711210+00:00 for version 6.6.11
|
||||
# Generated at 2024-01-18 21:07:26.764606+00:00 for version 6.6.12
|
||||
|
||||
python check_kernel_cve_status_version() {
|
||||
this_version = "6.6.11"
|
||||
this_version = "6.6.12"
|
||||
kernel_version = d.getVar("LINUX_VERSION")
|
||||
if kernel_version != this_version:
|
||||
bb.warn("Kernel CVE status needs updating: generated for %s but kernel is %s" % (this_version, kernel_version))
|
||||
@@ -4584,6 +4584,8 @@ CVE_STATUS[CVE-2022-48425] = "fixed-version: Fixed from version 6.4rc1"
|
||||
|
||||
CVE_STATUS[CVE-2022-48502] = "fixed-version: Fixed from version 6.2rc1"
|
||||
|
||||
CVE_STATUS[CVE-2022-48619] = "fixed-version: Fixed from version 5.18rc1"
|
||||
|
||||
CVE_STATUS[CVE-2023-0030] = "fixed-version: Fixed from version 5.0rc1"
|
||||
|
||||
CVE_STATUS[CVE-2023-0045] = "fixed-version: Fixed from version 6.2rc3"
|
||||
@@ -4666,6 +4668,8 @@ CVE_STATUS[CVE-2023-1382] = "fixed-version: Fixed from version 6.1rc7"
|
||||
|
||||
CVE_STATUS[CVE-2023-1390] = "fixed-version: Fixed from version 5.11rc4"
|
||||
|
||||
# CVE-2023-1476 has no known resolution
|
||||
|
||||
CVE_STATUS[CVE-2023-1513] = "fixed-version: Fixed from version 6.2"
|
||||
|
||||
CVE_STATUS[CVE-2023-1582] = "fixed-version: Fixed from version 5.17rc4"
|
||||
@@ -5114,7 +5118,7 @@ CVE_STATUS[CVE-2023-5090] = "fixed-version: Fixed from version 6.6rc7"
|
||||
|
||||
CVE_STATUS[CVE-2023-5158] = "fixed-version: Fixed from version 6.6rc5"
|
||||
|
||||
# CVE-2023-51779 needs backporting (fixed from 6.7rc7)
|
||||
CVE_STATUS[CVE-2023-51779] = "cpe-stable-backport: Backported in 6.6.9"
|
||||
|
||||
CVE_STATUS[CVE-2023-5178] = "fixed-version: Fixed from version 6.6rc7"
|
||||
|
||||
@@ -5136,6 +5140,8 @@ CVE_STATUS[CVE-2023-5972] = "fixed-version: Fixed from version 6.6rc7"
|
||||
|
||||
CVE_STATUS[CVE-2023-6039] = "fixed-version: Fixed from version 6.5rc5"
|
||||
|
||||
CVE_STATUS[CVE-2023-6040] = "fixed-version: Fixed from version 5.18rc1"
|
||||
|
||||
CVE_STATUS[CVE-2023-6111] = "cpe-stable-backport: Backported in 6.6.3"
|
||||
|
||||
CVE_STATUS[CVE-2023-6121] = "cpe-stable-backport: Backported in 6.6.4"
|
||||
@@ -5144,8 +5150,12 @@ CVE_STATUS[CVE-2023-6176] = "fixed-version: Fixed from version 6.6rc2"
|
||||
|
||||
# CVE-2023-6238 has no known resolution
|
||||
|
||||
# CVE-2023-6270 has no known resolution
|
||||
|
||||
# CVE-2023-6356 has no known resolution
|
||||
|
||||
CVE_STATUS[CVE-2023-6531] = "cpe-stable-backport: Backported in 6.6.7"
|
||||
|
||||
# CVE-2023-6535 has no known resolution
|
||||
|
||||
# CVE-2023-6536 has no known resolution
|
||||
@@ -5154,13 +5164,13 @@ CVE_STATUS[CVE-2023-6546] = "fixed-version: Fixed from version 6.5rc7"
|
||||
|
||||
CVE_STATUS[CVE-2023-6560] = "cpe-stable-backport: Backported in 6.6.5"
|
||||
|
||||
# CVE-2023-6606 needs backporting (fixed from 6.7rc7)
|
||||
CVE_STATUS[CVE-2023-6606] = "cpe-stable-backport: Backported in 6.6.9"
|
||||
|
||||
# CVE-2023-6610 needs backporting (fixed from 6.7rc7)
|
||||
|
||||
CVE_STATUS[CVE-2023-6622] = "cpe-stable-backport: Backported in 6.6.7"
|
||||
|
||||
# CVE-2023-6679 needs backporting (fixed from 6.7rc6)
|
||||
CVE_STATUS[CVE-2023-6679] = "fixed-version: only affects 6.7rc1 onwards"
|
||||
|
||||
CVE_STATUS[CVE-2023-6817] = "cpe-stable-backport: Backported in 6.6.7"
|
||||
|
||||
@@ -5170,3 +5180,13 @@ CVE_STATUS[CVE-2023-6932] = "cpe-stable-backport: Backported in 6.6.5"
|
||||
|
||||
# CVE-2023-7042 has no known resolution
|
||||
|
||||
CVE_STATUS[CVE-2023-7192] = "fixed-version: Fixed from version 6.3rc1"
|
||||
|
||||
CVE_STATUS[CVE-2024-0193] = "cpe-stable-backport: Backported in 6.6.10"
|
||||
|
||||
CVE_STATUS[CVE-2024-0340] = "fixed-version: Fixed from version 6.4rc6"
|
||||
|
||||
CVE_STATUS[CVE-2024-0443] = "fixed-version: Fixed from version 6.4rc7"
|
||||
|
||||
# Skipping dd=CVE-2023-1476, no affected_versions
|
||||
|
||||
|
||||
Reference in New Issue
Block a user