summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMathieu Dubois-Briand <mbriand@witekio.com>2022-12-08 15:23:45 +0100
committerKhem Raj <raj.khem@gmail.com>2022-12-09 10:39:27 -0800
commit90645db2fa078b50ec6807c75acea913b49ea669 (patch)
tree07d20322e5f7c94e81d1ed5c69cab342e426e94b
parent8e0432fd54a1412a67dc1f9c33f5f6afbb860a62 (diff)
downloadmeta-openembedded-90645db2fa078b50ec6807c75acea913b49ea669.tar.gz
nss: Whitelist CVEs related to libnssdbm
These CVEs only affect libnssdbm, compiled when --enable-legacy-db is used. https://bugzilla.mozilla.org/show_bug.cgi?id=1360782#c6 https://bugzilla.mozilla.org/show_bug.cgi?id=1360778#c8 https://bugzilla.mozilla.org/show_bug.cgi?id=1360900#c6 https://bugzilla.mozilla.org/show_bug.cgi?id=1360779#c9 Signed-off-by: Mathieu Dubois-Briand <mbriand@witekio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
-rw-r--r--meta-oe/recipes-support/nss/nss_3.74.bb4
1 files changed, 4 insertions, 0 deletions
diff --git a/meta-oe/recipes-support/nss/nss_3.74.bb b/meta-oe/recipes-support/nss/nss_3.74.bb
index 73701393e6..4a9482fca4 100644
--- a/meta-oe/recipes-support/nss/nss_3.74.bb
+++ b/meta-oe/recipes-support/nss/nss_3.74.bb
@@ -284,3 +284,7 @@ CVE_PRODUCT += "network_security_services"
284 284
285# CVE-2006-5201 affects only Sun Solaris 285# CVE-2006-5201 affects only Sun Solaris
286CVE_CHECK_IGNORE += "CVE-2006-5201" 286CVE_CHECK_IGNORE += "CVE-2006-5201"
287
288# CVES CVE-2017-11695 CVE-2017-11696 CVE-2017-11697 CVE-2017-11698 only affect
289# the legacy db (libnssdbm), only compiled with --enable-legacy-db.
290CVE_CHECK_IGNORE += "CVE-2017-11695 CVE-2017-11696 CVE-2017-11697 CVE-2017-11698"