From b0bf2829a26e5bc834048642ed8ce0adbd51f0d3 Mon Sep 17 00:00:00 2001 From: Davide Gardenal Date: Mon, 18 Jul 2022 13:07:09 +0200 Subject: php: ignore patched CVEs CVE-2007-2728, CVE-2007-3205 and CVE-2007-4596 are patched in our version of php but they don't have a vulnerable version range in the NVD database, that's why they need to be ignored. Signed-off-by: Davide Gardenal Signed-off-by: Khem Raj (cherry picked from commit 1642bfcb071aadb542c488bf79922842e32f1db5) Signed-off-by: Armin Kuster --- meta-oe/recipes-devtools/php/php_8.1.7.bb | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/meta-oe/recipes-devtools/php/php_8.1.7.bb b/meta-oe/recipes-devtools/php/php_8.1.7.bb index e9e8eccf3..cf4f6be3f 100644 --- a/meta-oe/recipes-devtools/php/php_8.1.7.bb +++ b/meta-oe/recipes-devtools/php/php_8.1.7.bb @@ -35,6 +35,12 @@ SRC_URI:append:class-target = " \ S = "${WORKDIR}/php-${PV}" SRC_URI[sha256sum] = "b816753eb005511e695d90945c27093c3236cc73db1262656d9fadd73ead7e9d" +CVE_CHECK_IGNORE += "\ + CVE-2007-2728 \ + CVE-2007-3205 \ + CVE-2007-4596 \ +" + inherit autotools pkgconfig python3native gettext # phpize is not scanned for absolute paths by default (but php-config is). -- cgit v1.2.3-54-g00ecf