From 6d6d36409cbcc28c1b5cf77b40bae0157294a98d Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Sun, 8 Mar 2026 15:04:27 +0100 Subject: [PATCH] gimp: ignore irrelevant CVEs These CVEs are not affecting the recipe, because they were introduced later, in v3.0. The commits the introduced the vulnerabilities: CVE-2025-14423: https://gitlab.gnome.org/GNOME/gimp/-/commit/222bef78c71ed8562a610f6863d56c0b3e2bef68 CVE-2025-14424: https://gitlab.gnome.org/GNOME/gimp/-/commit/a0fc5a025ae3579609730ebabc3c84146385da76 CVE-2026-2047: https://gitlab.gnome.org/GNOME/gimp/-/commit/00232e17875d4676a2c797a429db23b1a9815db8 Signed-off-by: Gyorgy Sarvari --- meta-gnome/recipes-gimp/gimp/gimp_2.10.30.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-gnome/recipes-gimp/gimp/gimp_2.10.30.bb b/meta-gnome/recipes-gimp/gimp/gimp_2.10.30.bb index ad9d34ef6d..f312dde399 100644 --- a/meta-gnome/recipes-gimp/gimp/gimp_2.10.30.bb +++ b/meta-gnome/recipes-gimp/gimp/gimp_2.10.30.bb @@ -75,3 +75,6 @@ RDEPENDS:${PN} += "mypaint-brushes-1.0" # It has been fixed in version 2.2.16 CVE_CHECK_IGNORE += "CVE-2007-3741" + +# These vulnerabilities were introduced in v3.0 +CVE_CHECK_IGNORE += "CVE-2025-14423 CVE-2025-14224 CVE-2026-2047"