diff options
| author | Richard Purdie <richard.purdie@linuxfoundation.org> | 2021-05-09 18:44:27 +0100 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2021-05-30 08:19:35 +0100 |
| commit | ab2c33bd30569b24680a39b9dffba2447cf731d7 (patch) | |
| tree | a911db035be8add0101e796b40890583a1d34bb3 | |
| parent | ceae5f22c99c6d34a3fc5be198f9e4a43794e53e (diff) | |
| download | poky-ab2c33bd30569b24680a39b9dffba2447cf731d7.tar.gz | |
grub2: Add CVE whitelist entries for issues fixed in 2.06
We're using a pre-release version of 2.06 so these issues are fixed but
continue to show up in the checks since it is pre-2.06 and the CPE
entries are "before but excluding 2.06".
Adding these will clean up CVE reports until the 2.06 release comes out.
(From OE-Core rev: 07451418e8ffef608e05b981bf7516bef5450d49)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
| -rw-r--r-- | meta/recipes-bsp/grub/grub2.inc | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/meta/recipes-bsp/grub/grub2.inc b/meta/recipes-bsp/grub/grub2.inc index 6de683ee1c..f0fa86b182 100644 --- a/meta/recipes-bsp/grub/grub2.inc +++ b/meta/recipes-bsp/grub/grub2.inc | |||
| @@ -27,6 +27,13 @@ SRC_URI[sha256sum] = "2c87f1f21e2ab50043e6cd9163c08f1b6c3a6171556bf23ff9ed65b074 | |||
| 27 | REALPV = "2.06~rc1" | 27 | REALPV = "2.06~rc1" |
| 28 | PV = "2.04+${REALPV}" | 28 | PV = "2.04+${REALPV}" |
| 29 | 29 | ||
| 30 | # Fixed in 2.06~rc1, can be removed for 2.06 final | ||
| 31 | CVE_CHECK_WHITELIST += "\ | ||
| 32 | CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-10713 \ | ||
| 33 | CVE-2020-14372 CVE-2020-15705 CVE-2020-15706 CVE-2020-15707 \ | ||
| 34 | CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2020-27779 \ | ||
| 35 | CVE-2021-3418 CVE-2021-20225 CVE-2021-20233" | ||
| 36 | |||
| 30 | S = "${WORKDIR}/grub-${REALPV}" | 37 | S = "${WORKDIR}/grub-${REALPV}" |
| 31 | 38 | ||
| 32 | UPSTREAM_CHECK_URI = "${GNU_MIRROR}/grub" | 39 | UPSTREAM_CHECK_URI = "${GNU_MIRROR}/grub" |