diff options
| author | Ross Burton <ross.burton@intel.com> | 2019-11-05 23:38:12 +0200 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2019-11-13 22:02:15 +0000 |
| commit | 25fb823284e11e6d7c7e40216b211dec2dbeb461 (patch) | |
| tree | 852512453f23a937aebee9e30c453e1dbe69a7cb /meta/recipes-multimedia | |
| parent | f2c963a9309bd4b7c0a60a31b81f2160d58c52c0 (diff) | |
| download | poky-25fb823284e11e6d7c7e40216b211dec2dbeb461.tar.gz | |
libpng: whitelist CVE-2019-17371
This is actually a memory leak in gif2png 2.x, so whitelist it in the libpng
recipe.
(From OE-Core rev: a10b6e0e8d4e6b5778b5ca4db60e96ea025ea475)
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-multimedia')
| -rw-r--r-- | meta/recipes-multimedia/libpng/libpng_1.6.37.bb | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/meta/recipes-multimedia/libpng/libpng_1.6.37.bb b/meta/recipes-multimedia/libpng/libpng_1.6.37.bb index 66af2f3d60..2ed87a8437 100644 --- a/meta/recipes-multimedia/libpng/libpng_1.6.37.bb +++ b/meta/recipes-multimedia/libpng/libpng_1.6.37.bb | |||
| @@ -29,3 +29,6 @@ PACKAGES =+ "${PN}-tools" | |||
| 29 | FILES_${PN}-tools = "${bindir}/png-fix-itxt ${bindir}/pngfix ${bindir}/pngcp" | 29 | FILES_${PN}-tools = "${bindir}/png-fix-itxt ${bindir}/pngfix ${bindir}/pngcp" |
| 30 | 30 | ||
| 31 | BBCLASSEXTEND = "native nativesdk" | 31 | BBCLASSEXTEND = "native nativesdk" |
| 32 | |||
| 33 | # CVE-2019-17371 is actually a memory leak in gif2png 2.x | ||
| 34 | CVE_CHECK_WHITELIST += "CVE-2019-17371" | ||