summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRichard Purdie <richard.purdie@linuxfoundation.org>2021-05-11 12:30:39 +0100
committerRichard Purdie <richard.purdie@linuxfoundation.org>2021-05-22 10:01:02 +0100
commit03b6c50c3da659790c656802fe3c4882113966ac (patch)
tree317dd6ffff001f13cf2bf59d4d719f5eed0ce6bd
parenta82e96f87eacc341fc38169b5d5fcb56619777fd (diff)
downloadpoky-03b6c50c3da659790c656802fe3c4882113966ac.tar.gz
openssh: Exclude CVE-2008-3844 from cve-check
CVE only applies to some distributed RHEL binaries so irrelavent to us. (From OE-Core rev: 416230b7236c391e89d0d7941b2d34b6234f993c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-rw-r--r--meta/recipes-connectivity/openssh/openssh_8.5p1.bb3
1 files changed, 3 insertions, 0 deletions
diff --git a/meta/recipes-connectivity/openssh/openssh_8.5p1.bb b/meta/recipes-connectivity/openssh/openssh_8.5p1.bb
index 41ac303d38..c6de519884 100644
--- a/meta/recipes-connectivity/openssh/openssh_8.5p1.bb
+++ b/meta/recipes-connectivity/openssh/openssh_8.5p1.bb
@@ -34,6 +34,9 @@ CVE_CHECK_WHITELIST += "CVE-2007-2768"
34# and when running in a Kerberos environment. As such it is not relevant to OpenEmbedded 34# and when running in a Kerberos environment. As such it is not relevant to OpenEmbedded
35CVE_CHECK_WHITELIST += "CVE-2014-9278" 35CVE_CHECK_WHITELIST += "CVE-2014-9278"
36 36
37# CVE only applies to some distributed RHEL binaries
38CVE_CHECK_WHITELIST += "CVE-2008-3844"
39
37PAM_SRC_URI = "file://sshd" 40PAM_SRC_URI = "file://sshd"
38 41
39inherit manpages useradd update-rc.d update-alternatives systemd 42inherit manpages useradd update-rc.d update-alternatives systemd