Re: [OE-core] gnupg CVE-2022-3515 #kirkstone

2024-06-18 Thread Clayton Casciato
sday, June 18, 2024 7:48 AM To: Clayton Casciato Cc: openembedded-core@lists.openembedded.org ; hongxu@windriver.com ; alex.kana...@gmail.com Subject: Re: [OE-core] gnupg CVE-2022-3515 #kirkstone On Fri, Jun 14, 2024 at 12:51 AM Clayton Casciato via lists.openembedde

[OE-core] gnupg CVE-2022-3515 #kirkstone

2024-06-13 Thread Clayton Casciato
patch exists in the fetched libksba-1.6.4.tar.bz2. $ sed -n '185,190p' libksba-1.6.4/src/ber-help.c Should this CVE be added to meta/conf/distro/include/cve-extra-exclusions.inc? Thank you! NB: This is my first time interacting. Please feel free to provide additional feedback su