From 85bb6467d48704318a3eeca148ed0085ae6bd442 Mon Sep 17 00:00:00 2001 From: Ross Burton Date: Mon, 6 Mar 2023 15:17:08 +0000 Subject: [PATCH] shadow: ignore CVE-2016-15024 This recently got an updated CPE which matches this recipe, but the issue is related to an entirely different shadow project so ignore it. (From OE-Core rev: 8dce0c01d9a0f6855e6a70a65412a43208b034a8) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni (cherry picked from commit 2331e98abb09cbcd56625d65c4e5d258dc29dd04) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie --- meta/recipes-extended/shadow/shadow_4.12.3.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-extended/shadow/shadow_4.12.3.bb b/meta/recipes-extended/shadow/shadow_4.12.3.bb index 40b11345c9..d1a3fd5593 100644 --- a/meta/recipes-extended/shadow/shadow_4.12.3.bb +++ b/meta/recipes-extended/shadow/shadow_4.12.3.bb @@ -9,3 +9,6 @@ BBCLASSEXTEND = "native nativesdk" # Severity is low and marked as closed and won't fix. # https://bugzilla.redhat.com/show_bug.cgi?id=884658 CVE_CHECK_IGNORE += "CVE-2013-4235" + +# This is an issue for a different shadow +CVE_CHECK_IGNORE += "CVE-2016-15024"