Re: [OE-core] [kirkstone][PATCH] rust: set CVE_STATUS for CVE-2024-24576

2024-04-15 Thread Steve Sakoman
CVE_STATUS is not supported in kirkstone, you should use CVE_CHECK_IGNORE Steve On Mon, Apr 15, 2024 at 5:01 AM Sadineni, Harish via lists.openembedded.org wrote: > > From: Harish Sadineni > > CVE-2024-24576 only applies when invoking batch files (with the `bat` and > `cmd` extensions) on

[OE-core] [kirkstone][PATCH] rust: set CVE_STATUS for CVE-2024-24576

2024-04-15 Thread Sadineni, Harish via lists.openembedded.org
From: Harish Sadineni CVE-2024-24576 only applies when invoking batch files (with the `bat` and `cmd` extensions) on Windows & No other platform or use is affected. More details about CVE is here: https://nvd.nist.gov/vuln/detail/CVE-2024-24576 Signed-off-by: Harish Sadineni ---