summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNinette Adhikari <ninette@thehoodiefirm.com>2024-06-26 07:21:09 -0700
committerKhem Raj <raj.khem@gmail.com>2024-06-28 11:22:02 -0700
commitbf84ac1c4c1a00c2aa92a09fbdfae128d055fe05 (patch)
tree03916170ff877527d20ed127baea5b6a645c4829
parent9f2e9daef1891d373792d5b1bcc36719349ba843 (diff)
downloadmeta-openembedded-bf84ac1c4c1a00c2aa92a09fbdfae128d055fe05.tar.gz
mercurial: Update CVE status for CVE-2022-43410
The recipe used in the `meta-openembedded` is a different mercurial package compared to the one which has the CVE issue. Package used in `meta-embedded`: https://www.mercurial-scm.org/ Package with CVE issue is a Jenkins plugin: https://plugins.jenkins.io/mercurial/ (This is reflected in the CPE) Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
-rw-r--r--meta-oe/recipes-devtools/mercurial/mercurial_6.6.3.bb1
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-oe/recipes-devtools/mercurial/mercurial_6.6.3.bb b/meta-oe/recipes-devtools/mercurial/mercurial_6.6.3.bb
index 89e6744dca..395a330790 100644
--- a/meta-oe/recipes-devtools/mercurial/mercurial_6.6.3.bb
+++ b/meta-oe/recipes-devtools/mercurial/mercurial_6.6.3.bb
@@ -34,3 +34,4 @@ PACKAGES =+ "${PN}-python"
34FILES:${PN} += "${PYTHON_SITEPACKAGES_DIR} ${datadir}" 34FILES:${PN} += "${PYTHON_SITEPACKAGES_DIR} ${datadir}"
35FILES:${PN}-python = "${nonarch_libdir}/${PYTHON_DIR}" 35FILES:${PN}-python = "${nonarch_libdir}/${PYTHON_DIR}"
36 36
37CVE_STATUS[CVE-2022-43410] = "cpe-incorrect: The recipe used in the `meta-openembedded` is a different mercurial package compared to the one which has the CVE issue."