diff options
| author | Peter Marko <peter.marko@siemens.com> | 2024-12-19 21:48:51 +0100 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2025-01-16 09:17:32 -0500 |
| commit | 158e1ae385609296e8722ee2975f4156bf5a2361 (patch) | |
| tree | 6036ab0defd63755b66ff3ccc60c65a1be74d216 | |
| parent | f1a8f14706c00dd073f419fe898f12055a4aecd9 (diff) | |
| download | meta-openembedded-158e1ae385609296e8722ee2975f4156bf5a2361.tar.gz | |
apache2: ignore CVE-1999-0678 and CVE-1999-1412
These CVEs are specific to Debian and MAC OS X respectively.
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1b86a60f6283b08acadc50914075d93dd362700b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
| -rw-r--r-- | meta-webserver/recipes-httpd/apache2/apache2_2.4.62.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta-webserver/recipes-httpd/apache2/apache2_2.4.62.bb b/meta-webserver/recipes-httpd/apache2/apache2_2.4.62.bb index 7d6ea27e7e..475f77d41b 100644 --- a/meta-webserver/recipes-httpd/apache2/apache2_2.4.62.bb +++ b/meta-webserver/recipes-httpd/apache2/apache2_2.4.62.bb | |||
| @@ -38,6 +38,8 @@ DEPENDS = "openssl expat pcre apr apr-util apache2-native " | |||
| 38 | CVE_PRODUCT = "apache:http_server" | 38 | CVE_PRODUCT = "apache:http_server" |
| 39 | 39 | ||
| 40 | CVE_STATUS[CVE-1999-0289] = "not-applicable-platform: The current version (2.4.6) is not affected. It only applies for Windows" | 40 | CVE_STATUS[CVE-1999-0289] = "not-applicable-platform: The current version (2.4.6) is not affected. It only applies for Windows" |
| 41 | CVE_STATUS[CVE-1999-0678] = "not-applicable-platform: this CVE is for Debian packaging configuration" | ||
| 42 | CVE_STATUS[CVE-1999-1412] = "not-applicable-platform: this CVE is for MAC OS X specific problem" | ||
| 41 | CVE_STATUS[CVE-2007-0450] = "not-applicable-platform: The current version (2.4.6) is not affected. It only applies for Windows." | 43 | CVE_STATUS[CVE-2007-0450] = "not-applicable-platform: The current version (2.4.6) is not affected. It only applies for Windows." |
| 42 | CVE_STATUS[CVE-2007-6421] = "cpe-incorrect: The current version (2.4.59) is not affected by the CVE which affects versions from 2.2 (incl.) to 2.2.8 (excl.)" | 44 | CVE_STATUS[CVE-2007-6421] = "cpe-incorrect: The current version (2.4.59) is not affected by the CVE which affects versions from 2.2 (incl.) to 2.2.8 (excl.)" |
| 43 | CVE_STATUS[CVE-2007-6422] = "cpe-incorrect: The current version (2.4.59) is not affected by the CVE which affects versions from 2.2 (incl.) to 2.2.8 (excl.)" | 45 | CVE_STATUS[CVE-2007-6422] = "cpe-incorrect: The current version (2.4.59) is not affected by the CVE which affects versions from 2.2 (incl.) to 2.2.8 (excl.)" |