python3: ignore CVE-2022-26488

Message ID 20220322111948.3407400-1-ross.burton@arm.com
State Accepted, archived
Commit 2bd3c5a93988140d9927340b3af68785ae03db65
Headers show
Series python3: ignore CVE-2022-26488 | expand

Commit Message

Ross Burton March 22, 2022, 11:19 a.m. UTC
This CVE is specific to Microsoft Windows, so we can ignore it.

Signed-off-by: Ross Burton <ross.burton@arm.com>
---
 meta/recipes-devtools/python/python3_3.10.2.bb | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

Patch

diff --git a/meta/recipes-devtools/python/python3_3.10.2.bb b/meta/recipes-devtools/python/python3_3.10.2.bb
index 32da2a12c8d..227a72d3953 100644
--- a/meta/recipes-devtools/python/python3_3.10.2.bb
+++ b/meta/recipes-devtools/python/python3_3.10.2.bb
@@ -52,9 +52,8 @@  CVE_PRODUCT = "python"
 CVE_CHECK_IGNORE += "CVE-2007-4559"
 # This is not exploitable when glibc has CVE-2016-10739 fixed.
 CVE_CHECK_IGNORE += "CVE-2019-18348"
-
-# This is windows only issue.
-CVE_CHECK_IGNORE += "CVE-2020-15523"
+# These are specific to Microsoft Windows
+CVE_CHECK_IGNORE += "CVE-2020-15523 CVE-2022-26488"
 
 PYTHON_MAJMIN = "3.10"