summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDavide Gardenal <davidegarde2000@gmail.com>2022-07-18 13:28:23 +0200
committerArmin Kuster <akuster808@gmail.com>2022-07-21 16:46:46 -0700
commit7e3596e848efc740a81cce5c2e547a551efbbb66 (patch)
tree8039a8b4e3f4df7e626ce9c4f6cfcf65f665978f
parentd3d8e62bf1caa3870a504c0addcfd200b33c189f (diff)
downloadmeta-security-7e3596e848efc740a81cce5c2e547a551efbbb66.tar.gz
sssd: ignore CVE-2018-16838
CVE-2018-16838 is patched in our version of sssd but it doesn't have a vulnerable version range in the NVD database, that's why it needs to be ignored. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
-rw-r--r--recipes-security/sssd/sssd_2.5.2.bb4
1 files changed, 4 insertions, 0 deletions
diff --git a/recipes-security/sssd/sssd_2.5.2.bb b/recipes-security/sssd/sssd_2.5.2.bb
index 9f1d627..4c75e0a 100644
--- a/recipes-security/sssd/sssd_2.5.2.bb
+++ b/recipes-security/sssd/sssd_2.5.2.bb
@@ -28,6 +28,10 @@ SRC_URI = "https://github.com/SSSD/sssd/releases/download/${PV}/sssd-${PV}.tar.g
28 28
29SRC_URI[sha256sum] = "5e21b3c7b4a2f1063d0fbdd3216d29886b6eaba153b44fb5961698367f399a0f" 29SRC_URI[sha256sum] = "5e21b3c7b4a2f1063d0fbdd3216d29886b6eaba153b44fb5961698367f399a0f"
30 30
31CVE_CHECK_IGNORE += "\
32 CVE-2018-16838 \
33"
34
31inherit autotools pkgconfig gettext python3-dir features_check systemd 35inherit autotools pkgconfig gettext python3-dir features_check systemd
32 36
33REQUIRED_DISTRO_FEATURES = "pam" 37REQUIRED_DISTRO_FEATURES = "pam"