gnome-settings-daemon: ignore CVE-2024-38394

Details: https://nvd.nist.gov/vuln/detail/CVE-2024-38394

The CVE has the disputed flag. The project maintainers claim that the issue
is not in gnome-setttings-daemon. If the vulnerability needs to be handled
in gnome-settings-daemon, than it is a new feature rather than a vulnerability fix.

Due to this, ignore this CVE.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Gyorgy Sarvari 2026-02-06 09:20:48 +01:00 committed by Anuj Mittal
parent a33dae10b1
commit 2073a86a79
No known key found for this signature in database
GPG Key ID: 4340AEFE69F5085C

View File

@ -48,3 +48,5 @@ FILES:${PN} += " \
${systemd_user_unitdir} \
${libdir}/gnome-settings-daemon-${@gnome_verdir("${PV}")}/libgsd.so \
"
CVE_STATUS[CVE-2024-38394] = "disputed: mitigation would be a new feature, not a CVE"