From ff0f3fca815318e39156762e9960595287e72bf1 Mon Sep 17 00:00:00 2001 From: Khem Raj Date: Sat, 28 Sep 2024 19:42:21 +0200 Subject: [PATCH] gnupg: Document CVE-2022-3219 and mark wontfix (From OE-Core rev: f10f9c3a8d2c17d5a6c3f0b00749e5b34a66e090) (From OE-Core rev: 1bce8a63edd93070bdd8e8a518a6d359e3fbf0ba) Signed-off-by: Khem Raj Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- meta/recipes-support/gnupg/gnupg_2.4.4.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-support/gnupg/gnupg_2.4.4.bb b/meta/recipes-support/gnupg/gnupg_2.4.4.bb index fff7d8c6da..ec75960235 100644 --- a/meta/recipes-support/gnupg/gnupg_2.4.4.bb +++ b/meta/recipes-support/gnupg/gnupg_2.4.4.bb @@ -88,3 +88,4 @@ BBCLASSEXTEND = "native nativesdk" lcl_maybe_fortify:mipsarch = "" +CVE_STATUS[CVE-2022-3219] = "upstream-wontfix: Upstream doesn't seem to be keen on merging the proposed commit - https://dev.gnupg.org/T5993"