From 64e49ed5e7c716ae7b5d0a17ab06ff1b05078d7a Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Wed, 12 Feb 2025 18:38:47 +0100 Subject: subversion: ignore CVE-2024-45720 Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-45720 This CVE is relevant only for subversion running on Windows. (From OE-Core rev: 1be6e32a75e40bc3e1d3c7256350579c37e3d22f) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman Reviewed-by: Sofiane Hamam Signed-off-by: Steve Sakoman --- meta/recipes-devtools/subversion/subversion_1.14.3.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/subversion/subversion_1.14.3.bb b/meta/recipes-devtools/subversion/subversion_1.14.3.bb index 1cf4e1734b..b93c7ee5f8 100644 --- a/meta/recipes-devtools/subversion/subversion_1.14.3.bb +++ b/meta/recipes-devtools/subversion/subversion_1.14.3.bb @@ -18,6 +18,8 @@ inherit autotools pkgconfig gettext python3native CVE_PRODUCT = "apache:subversion" +CVE_STATUS[CVE-2024-45720] = "not-applicable-platform: Issue only applies on Windows" + PACKAGECONFIG ?= "" PACKAGECONFIG[boost] = "--with-boost=${RECIPE_SYSROOT}${exec_prefix},--without-boost,boost" -- cgit v1.2.3-54-g00ecf