[nanbield,06/41] linux-yocto: update CVE exclusions

Message ID	d705c4071d0f829ad3348af9899e6a3a4ea3fa48.1703864512.git.steve@sakoman.com
State	New, archived
Headers	show Return-Path: <steve@sakoman.com> ip: 209.85.214.170, mailfrom: steve@sakoman.com) From: Steve Sakoman <steve@sakoman.com> To: openembedded-core@lists.openembedded.org Subject: [OE-core][nanbield 06/41] linux-yocto: update CVE exclusions Date: Fri, 29 Dec 2023 05:44:20 -1000 Message-Id: <d705c4071d0f829ad3348af9899e6a3a4ea3fa48.1703864512.git.steve@sakoman.com> In-Reply-To: <cover.1703864512.git.steve@sakoman.com> References: <cover.1703864512.git.steve@sakoman.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[nanbield,01/41] cve-update-nvd2-native: remove unused variable CVE_SOCKET_TIMEOUT \| expand [nanbield,01/41] cve-update-nvd2-native: remove unused variable CVE_SOCKET_TIMEOUT [nanbield,02/41] cve-update-nvd2-native: make number of fetch attemtps configurable [nanbield,03/41] cve-update-nvd2-native: faster requests with API keys [nanbield,04/41] cve-update-nvd2-native: increase the delay between subsequent request failures [nanbield,05/41] rust: Fix CVE-2023-40030 [nanbield,06/41] linux-yocto: update CVE exclusions [nanbield,07/41] linux-yocto/6.1: drop removed IMA option [nanbield,08/41] linux-yocto-rt/6.1: update to -rt18 [nanbield,09/41] linux-yocto/6.1: update to v6.1.66 [nanbield,10/41] linux-yocto/6.1: update to v6.1.67 [nanbield,11/41] linux-yocto/6.1: update to v6.1.68 [nanbield,12/41] linux/cve-exclusion6.1: Update to latest kernel point release [nanbield,13/41] linux-yocto/6.5: drop removed IMA option [nanbield,14/41] linux-yocto/6.5: fix AB-INT: QEMU kernel panic: No irq handler for vector [nanbield,15/41] libsolv: upgrade 0.7.25 -> 0.7.26 [nanbield,16/41] gstreamer1.0: upgrade 1.22.6 -> 1.22.7 [nanbield,17/41] bind: upgrade 9.18.19 -> 9.18.20 [nanbield,18/41] ell: upgrade 0.59 -> 0.60 [nanbield,19/41] libgcrypt: upgrade 1.10.2 -> 1.10.3 [nanbield,20/41] libxslt: upgrade 1.1.38 -> 1.1.39 [nanbield,21/41] log4cplus: upgrade 2.1.0 -> 2.1.1 [nanbield,22/41] cmake: upgrade 3.27.5 -> 3.27.7 [nanbield,23/41] systemd: update LICENSE statement [nanbield,24/41] sed -i destroys symlinks [nanbield,25/41] gtk: Add rdepend on printbackend for cups [nanbield,26/41] useradd_base: Fix sed command line for passwd-expire [nanbield,27/41] lib/oe/patch: ensure os.chdir restoring always happens [nanbield,28/41] kernel-arch: use ccache only for compiler [nanbield,29/41] package_ipk: Fix Source: field variable dependency [nanbield,30/41] systemd-compat-units.bb: fix postinstall script [nanbield,31/41] devtool: fix update-recipe dry-run mode [nanbield,32/41] python3-ptest: skip test_storlines [nanbield,33/41] devtool: finish/update-recipe: restrict mode srcrev to recipes fetched from SCM [nanbield,34/41] bluez5: fix connection for ps5/dualshock controllers [nanbield,35/41] cups: Add root,sys,wheel to system groups [nanbield,36/41] json-c: fix icecc compilation [nanbield,37/41] systemd-boot: Fix build issues on armv7a-linux [nanbield,38/41] patchtest: shorten patch signed-off-by test output [nanbield,39/41] testimage: Drop target_dumper and most of monitor_dumper [nanbield,40/41] tcl: skip timing-dependent tests in run-ptest [nanbield,41/41] tcl: skip async and event tests in run-ptest

Message ID

d705c4071d0f829ad3348af9899e6a3a4ea3fa48.1703864512.git.steve@sakoman.com

State

New, archived

Headers

From: Steve Sakoman <steve@sakoman.com>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][nanbield 06/41] linux-yocto: update CVE exclusions
Date: Fri, 29 Dec 2023 05:44:20 -1000
Message-Id: 
 <d705c4071d0f829ad3348af9899e6a3a4ea3fa48.1703864512.git.steve@sakoman.com>
In-Reply-To: <cover.1703864512.git.steve@sakoman.com>
References: <cover.1703864512.git.steve@sakoman.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[nanbield,01/41] cve-update-nvd2-native: remove unused variable CVE_SOCKET_TIMEOUT | expand

Commit Message

Steve Sakoman Dec. 29, 2023, 3:44 p.m. UTC

From: Ross Burton <ross.burton@arm.com>

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 4cfc4187ac90a4504b93a01ff6333d14928728a8)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
 meta/recipes-kernel/linux/cve-exclusion_6.1.inc | 4 ++--
 meta/recipes-kernel/linux/cve-exclusion_6.5.inc | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/meta/recipes-kernel/linux/cve-exclusion_6.1.inc b/meta/recipes-kernel/linux/cve-exclusion_6.1.inc
index 650b83a900..bf23742d70 100644
--- a/meta/recipes-kernel/linux/cve-exclusion_6.1.inc
+++ b/meta/recipes-kernel/linux/cve-exclusion_6.1.inc
@@ -1,6 +1,6 @@ 
 
 # Auto-generated CVE metadata, DO NOT EDIT BY HAND.
-# Generated at 2023-12-05 13:22:34.961692+00:00 for version 6.1.65
+# Generated at 2023-12-18 14:15:17.069657+00:00 for version 6.1.65
 
 python check_kernel_cve_status_version() {
     this_version = "6.1.65"
@@ -5126,7 +5126,7 @@  CVE_STATUS[CVE-2023-5633] = "fixed-version: only affects 6.2 onwards"
 
 CVE_STATUS[CVE-2023-6111] = "fixed-version: only affects 6.6rc3 onwards"
 
-# CVE-2023-6121 needs backporting (fixed from 6.7rc3)
+CVE_STATUS[CVE-2023-6121] = "cpe-stable-backport: Backported in 6.1.65"
 
 CVE_STATUS[CVE-2023-6176] = "cpe-stable-backport: Backported in 6.1.54"
 
diff --git a/meta/recipes-kernel/linux/cve-exclusion_6.5.inc b/meta/recipes-kernel/linux/cve-exclusion_6.5.inc
index 046c3f95c3..7711bcb4d6 100644
--- a/meta/recipes-kernel/linux/cve-exclusion_6.5.inc
+++ b/meta/recipes-kernel/linux/cve-exclusion_6.5.inc
@@ -1,6 +1,6 @@ 
 
 # Auto-generated CVE metadata, DO NOT EDIT BY HAND.
-# Generated at 2023-12-05 13:22:43.339114+00:00 for version 6.5.13
+# Generated at 2023-12-18 14:15:23.952852+00:00 for version 6.5.13
 
 python check_kernel_cve_status_version() {
     this_version = "6.5.13"

[nanbield,06/41] linux-yocto: update CVE exclusions

Commit Message

Patch