diff mbox series

grub2: Exclude CVE-2023-4001 from cve-check

Message ID 20240129065522.860058-1-xiangyu.chen@eng.windriver.com
State Superseded, archived
Headers show
Series grub2: Exclude CVE-2023-4001 from cve-check | expand

Commit Message

Xiangyu Chen Jan. 29, 2024, 6:55 a.m. UTC 
From: Xiangyu Chen <xiangyu.chen@windriver.com>

This issue was introduced in a downstream patch in
Red Hat's version of grub2 and does not affect the upstream package.

Ref:
https://nvd.nist.gov/vuln/detail/CVE-2023-4001

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
---
 meta/recipes-bsp/grub/grub2.inc | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/meta/recipes-bsp/grub/grub2.inc b/meta/recipes-bsp/grub/grub2.inc
index 5685cae0ab..18046c26bc 100644
--- a/meta/recipes-bsp/grub/grub2.inc
+++ b/meta/recipes-bsp/grub/grub2.inc
@@ -24,6 +24,7 @@  SRC_URI = "${GNU_MIRROR}/grub/grub-${PV}.tar.gz \
 SRC_URI[sha256sum] = "b30919fa5be280417c17ac561bb1650f60cfb80cc6237fa1e2b6f56154cb9c91"
 
 CVE_STATUS[CVE-2019-14865] = "not-applicable-platform: applies only to RHEL"
+CVE_STATUS[CVE-2023-4001] = "not-applicable-platform: applies only to RHEL"
 CVE_STATUS[CVE-2021-46705] = "not-applicable-platform: Applies only to SUSE"
 
 DEPENDS = "flex-native bison-native gettext-native"