diff mbox series

[kirkstone,6/7] gcc-shared-source: ignore CVE-2023-4039

Message ID 04511734c6dc8c7dda3a943b385cd273d012d8c7.1707234215.git.steve@sakoman.com
State Accepted, archived
Commit 04511734c6dc8c7dda3a943b385cd273d012d8c7
Delegated to: Steve Sakoman
Headers show
Series [kirkstone,1/7] curl: ignore CVE-2023-42915 | expand

Commit Message

Steve Sakoman Feb. 6, 2024, 3:45 p.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

Concept of gcc-source prevents cve-check to detect existing
CVE patch file.
So ignore this CVE in all recipes using gcc-source via this
include file.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
 meta/recipes-devtools/gcc/gcc-shared-source.inc | 3 +++
 1 file changed, 3 insertions(+)
diff mbox series

Patch

diff --git a/meta/recipes-devtools/gcc/gcc-shared-source.inc b/meta/recipes-devtools/gcc/gcc-shared-source.inc
index 03f520b093..7aa1c22bf0 100644
--- a/meta/recipes-devtools/gcc/gcc-shared-source.inc
+++ b/meta/recipes-devtools/gcc/gcc-shared-source.inc
@@ -19,3 +19,6 @@  do_deploy_source_date_epoch () {
 	cp -p $(dirname ${S})/$sde_file ${SDE_DEPLOYDIR}
 	cp -p $(dirname ${S})/$sde_file ${SDE_FILE}
 }
+
+# patch is available via gcc-source recipe
+CVE_CHECK_IGNORE += "CVE-2023-4039"