summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPeter Marko <peter.marko@siemens.com>2023-06-30 00:10:20 +0200
committerArmin Kuster <akuster808@gmail.com>2023-07-30 09:09:22 -0400
commit06c240c3c235fa06fe724e278d53463ac67cc26b (patch)
treede6a7aaaf3f7f2b9ffbe19650c25717cec59caf6
parentd398cc6ea6716afd3a3a6e88ad8fbdc89510ef23 (diff)
downloadmeta-security-06c240c3c235fa06fe724e278d53463ac67cc26b.tar.gz
tpm2-tss: ignore CVE-2023-22745
As already mentioned in upgrade commit, this CVE is fixed. But cve_check still reports it as NVD DB was not updated. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
-rw-r--r--meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb3
1 files changed, 3 insertions, 0 deletions
diff --git a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb
index 9b76c2f..4d2c911 100644
--- a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb
+++ b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb
@@ -88,3 +88,6 @@ FILES:${PN} = "\
88 ${sysconfdir}/sysusers.d" 88 ${sysconfdir}/sysusers.d"
89 89
90RDEPENDS:libtss2 = "libgcrypt" 90RDEPENDS:libtss2 = "libgcrypt"
91
92# This is patched in 3.2.2, NVD DB was not updated to reflect this backport
93CVE_CHECK_IGNORE += "CVE-2023-22745"