summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPeter Marko <peter.marko@siemens.com>2023-04-19 23:54:08 +0200
committerSteve Sakoman <steve@sakoman.com>2023-04-26 04:19:06 -1000
commite610a24db73225d039ac7140cb7d58835cc6b2fd (patch)
tree5d64d9090d8769686c16b8126298b3ea8ea97202
parentafb4425be96e8e5a47a5dd3b87d5615bd3d8e0eb (diff)
downloadpoky-e610a24db73225d039ac7140cb7d58835cc6b2fd.tar.gz
go: ignore CVE-2022-41716
This CVE is specific to Microsoft Windows, ignore it. Patch fixing it (https://go-review.googlesource.com/c/go/+/446916) also adds a redundant check to generic os/exec which could be backported but it should not be necessary as backport always takes a small risk to break old code. (From OE-Core rev: 4263f3fda59aacb4f159d2dffb52e5f66249b5e4) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
-rw-r--r--meta/recipes-devtools/go/go-1.14.inc3
1 files changed, 3 insertions, 0 deletions
diff --git a/meta/recipes-devtools/go/go-1.14.inc b/meta/recipes-devtools/go/go-1.14.inc
index 74017f4d90..8df9d62612 100644
--- a/meta/recipes-devtools/go/go-1.14.inc
+++ b/meta/recipes-devtools/go/go-1.14.inc
@@ -82,3 +82,6 @@ CVE_CHECK_WHITELIST += "CVE-2021-41772"
82 82
83# Fixes code that was added in go1.16, does not exist in 1.14 83# Fixes code that was added in go1.16, does not exist in 1.14
84CVE_CHECK_WHITELIST += "CVE-2022-30630" 84CVE_CHECK_WHITELIST += "CVE-2022-30630"
85
86# This is specific to Microsoft Windows
87CVE_CHECK_WHITELIST += "CVE-2022-41716"