From 5fd149feb49fb682c59d6963e6ed7437238dcf55 Mon Sep 17 00:00:00 2001 From: Ninette Adhikari Date: Mon, 13 Oct 2025 21:19:18 +0200 Subject: [PATCH] xsp: CVE status update for CVE-2006-2658 The recipe used in the `meta-openembedded` is a different xsp package compared to the one which has the CVE issue. Package used in `meta-embedded`: maemo xsp http://repository.maemo.org/pool/maemo/ossw/source/x/xsp/ Package with CVE issue: mono xsp https://github.com/mono/xsp Signed-off-by: Ninette Adhikari Signed-off-by: Khem Raj (cherry picked from commit 3cb411a05744eaa6e822c3d435d9205aa87ff632) Reworked for Kirkstone (CVE_CHECK_IGNORE vs CVE_STATUS) Signed-off-by: Gyorgy Sarvari --- meta-oe/recipes-multimedia/xsp/xsp_1.0.0-8.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-oe/recipes-multimedia/xsp/xsp_1.0.0-8.bb b/meta-oe/recipes-multimedia/xsp/xsp_1.0.0-8.bb index c611da48c0..fbd3ee09b5 100644 --- a/meta-oe/recipes-multimedia/xsp/xsp_1.0.0-8.bb +++ b/meta-oe/recipes-multimedia/xsp/xsp_1.0.0-8.bb @@ -13,3 +13,6 @@ REQUIRED_DISTRO_FEATURES = "x11" SRC_URI[md5sum] = "2a0d8d02228d4cbd28b6e07bb7c17cf5" SRC_URI[sha256sum] = "8b722b952b64841d996c70c3278499886c81bb5012991beed5f66f4158418f59" + +# cpe-incorrect: The recipe used in the `meta-openembedded` is a different xsp package compared to the one which has the CVE issue. +CVE_CHECK_IGNORE += "CVE-2006-2658"