summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorArmin Kuster <akuster808@gmail.com>2021-09-12 09:27:32 -0700
committerRichard Purdie <richard.purdie@linuxfoundation.org>2021-09-16 09:50:34 +0100
commit9cabb26aa24744ae88e5621be849ca0ac0572af2 (patch)
tree5a31b0c73ec47951e3a1842404e8492f3de114e4
parent3e1026ef31efabe43b7e821e23f42981ce3e04bf (diff)
downloadpoky-9cabb26aa24744ae88e5621be849ca0ac0572af2.tar.gz
tar: ignore node-tar CVEs
These three CVEs are specific to the Node package node-tar. exclude: CVE-2021-37701 CVE-2021-37712 CVE-2021-37713 (From OE-Core rev: 9f9317a02d73c1e5aea026683a037e52c996c7bb) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-rw-r--r--meta/recipes-extended/tar/tar_1.34.bb1
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-extended/tar/tar_1.34.bb b/meta/recipes-extended/tar/tar_1.34.bb
index a6a417a1a5..3488a6c955 100644
--- a/meta/recipes-extended/tar/tar_1.34.bb
+++ b/meta/recipes-extended/tar/tar_1.34.bb
@@ -65,3 +65,4 @@ BBCLASSEXTEND = "native nativesdk"
65 65
66# These are both specific to the NPM package node-tar 66# These are both specific to the NPM package node-tar
67CVE_CHECK_WHITELIST += "CVE-2021-32803 CVE-2021-32804" 67CVE_CHECK_WHITELIST += "CVE-2021-32803 CVE-2021-32804"
68CVE_CHECK_WHITELIST += "CVE-2021-37701 CVE-2021-37712 CVE-2021-37713"