From: Peter Marko <[email protected]> As already mentioned in upgrade commit, this CVE is fixed. But cve_check still reports it as NVD DB was not updated.
Signed-off-by: Peter Marko <[email protected]> --- meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb index 9b76c2f..4d2c911 100644 --- a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb +++ b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb @@ -88,3 +88,6 @@ FILES:${PN} = "\ ${sysconfdir}/sysusers.d" RDEPENDS:libtss2 = "libgcrypt" + +# This is patched in 3.2.2, NVD DB was not updated to reflect this backport +CVE_CHECK_IGNORE += "CVE-2023-22745" -- 2.30.2
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#60481): https://lists.yoctoproject.org/g/yocto/message/60481 Mute This Topic: https://lists.yoctoproject.org/mt/99860566/21656 Group Owner: [email protected] Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
