diff options
author | Adrian Bunk <bunk@stusta.de> | 2020-01-17 19:04:20 +0200 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2020-01-28 11:15:01 +0000 |
commit | 57da5247c05f87ab35a900a06f9731323d68bf77 (patch) | |
tree | e8c8fa172b9ee115bd05773f97c415976925f634 | |
parent | a19e3961a42af7a685113ded236122e927d32b5e (diff) | |
download | poky-57da5247c05f87ab35a900a06f9731323d68bf77.tar.gz |
python: Whitelist CVE-2017-17522 CVE-2017-18207 CVE-2015-5652
One Windows-only CVE that cannot be fixed, and two CVEs
where upstream agreement is that they are not vulnerabilities.
(From OE-Core rev: 1b69d141b73e46cc377f8566868da44dd5b1ea42)
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-rw-r--r-- | meta/recipes-devtools/python/python.inc | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/meta/recipes-devtools/python/python.inc b/meta/recipes-devtools/python/python.inc index b093ea6f09..5d280dc63b 100644 --- a/meta/recipes-devtools/python/python.inc +++ b/meta/recipes-devtools/python/python.inc | |||
@@ -19,6 +19,16 @@ UPSTREAM_CHECK_REGEX = "[Pp]ython-(?P<pver>2(\.\d+)+).tar" | |||
19 | 19 | ||
20 | CVE_PRODUCT = "python" | 20 | CVE_PRODUCT = "python" |
21 | 21 | ||
22 | # Upstream agreement is that these are not security issues: | ||
23 | # https://bugs.python.org/issue32367 | ||
24 | CVE_CHECK_WHITELIST += "CVE-2017-17522" | ||
25 | # https://bugs.python.org/issue32056 | ||
26 | CVE_CHECK_WHITELIST += "CVE-2017-18207" | ||
27 | |||
28 | # Windows-only, "It was determined that this is a longtime behavior | ||
29 | # of Python that cannot really be altered at this point." | ||
30 | CVE_CHECK_WHITELIST += "CVE-2015-5652" | ||
31 | |||
22 | PYTHON_MAJMIN = "2.7" | 32 | PYTHON_MAJMIN = "2.7" |
23 | 33 | ||
24 | inherit autotools pkgconfig | 34 | inherit autotools pkgconfig |