From 80dc690ccace30006556fdb41a17a2ae691ae51c Mon Sep 17 00:00:00 2001 From: Titouan Christophe Date: Thu, 23 Oct 2025 16:05:26 +0200 Subject: [PATCH] package/openvmtools: ignore CVE-2021-31693 Signed-off-by: Titouan Christophe Signed-off-by: Julien Olivain (cherry picked from commit 2cf55b4e4917363f13b541e8ab873b7bbc4b03dd) Signed-off-by: Thomas Perale --- package/openvmtools/openvmtools.mk | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/package/openvmtools/openvmtools.mk b/package/openvmtools/openvmtools.mk index 0f5c86fe6d..58876c877a 100644 --- a/package/openvmtools/openvmtools.mk +++ b/package/openvmtools/openvmtools.mk @@ -13,6 +13,10 @@ OPENVMTOOLS_LICENSE_FILES = COPYING OPENVMTOOLS_CPE_ID_VENDOR = vmware OPENVMTOOLS_CPE_ID_PRODUCT = tools +# This CVE affects a Wordpress plugin. VMware information, +# previously connected to this CVE ID because of a typo, is at CVE-2022-31693 +OPENVMTOOLS_IGNORE_CVES += CVE-2021-31693 + # 0013-Properly-check-authorization-on-incoming-guestOps-re.patch OPENVMTOOLS_IGNORE_CVES += CVE-2022-31676