From 06c240c3c235fa06fe724e278d53463ac67cc26b Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Fri, 30 Jun 2023 00:10:20 +0200 Subject: tpm2-tss: ignore CVE-2023-22745 As already mentioned in upgrade commit, this CVE is fixed. But cve_check still reports it as NVD DB was not updated. Signed-off-by: Peter Marko Signed-off-by: Armin Kuster --- meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb index 9b76c2f..4d2c911 100644 --- a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb +++ b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.2.2.bb @@ -88,3 +88,6 @@ FILES:${PN} = "\ ${sysconfdir}/sysusers.d" RDEPENDS:libtss2 = "libgcrypt" + +# This is patched in 3.2.2, NVD DB was not updated to reflect this backport +CVE_CHECK_IGNORE += "CVE-2023-22745" -- cgit v1.2.3-54-g00ecf