diff options
author | Ross Burton <ross.burton@arm.com> | 2023-02-27 16:21:28 +0000 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2023-02-28 07:53:54 +0000 |
commit | fcb643cd9996def0fedbeb2eeb03822108d1618d (patch) | |
tree | e203891bbd4ee5bcc5dea2c141e1ff9052f9b091 | |
parent | 6bdd652fb6ddffdcd742235049a05aaccff9dc97 (diff) | |
download | poky-fcb643cd9996def0fedbeb2eeb03822108d1618d.tar.gz |
glibc: add ignore for CVE-2023-25139
This CVE has been fixed in the 2.37 release branch (07b9521fc6) and
we're now using a SHA that incorporates that commit, so manually mark it
as ignored.
(From OE-Core rev: b143e355ef362dac89f8b125904d2e47c74e597e)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-rw-r--r-- | meta/recipes-core/glibc/glibc_2.37.bb | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/meta/recipes-core/glibc/glibc_2.37.bb b/meta/recipes-core/glibc/glibc_2.37.bb index f299a3004a..31c94929b9 100644 --- a/meta/recipes-core/glibc/glibc_2.37.bb +++ b/meta/recipes-core/glibc/glibc_2.37.bb | |||
@@ -19,6 +19,9 @@ CVE_CHECK_IGNORE += "CVE-2019-1010025" | |||
19 | # This has been integrated into the 2.36 branch as of c399271 so is now fixed | 19 | # This has been integrated into the 2.36 branch as of c399271 so is now fixed |
20 | CVE_CHECK_IGNORE += "CVE-2022-39046" | 20 | CVE_CHECK_IGNORE += "CVE-2022-39046" |
21 | 21 | ||
22 | # This is integrated into the 2.37 branch as of 07b9521fc6 | ||
23 | CVE_CHECK_IGNORE += "CVE-2023-25139" | ||
24 | |||
22 | DEPENDS += "gperf-native bison-native" | 25 | DEPENDS += "gperf-native bison-native" |
23 | 26 | ||
24 | NATIVESDKFIXES ?= "" | 27 | NATIVESDKFIXES ?= "" |