summaryrefslogtreecommitdiffstats
path: root/meta
diff options
context:
space:
mode:
authorRichard Purdie <richard.purdie@linuxfoundation.org>2021-09-06 15:11:51 +0100
committerRichard Purdie <richard.purdie@linuxfoundation.org>2021-09-14 17:27:42 +0100
commit7f73831fde4c3e31bda5631ed966f33d8e9c9d45 (patch)
tree5bce125a3f3d6d443e1a7533b66657525fdd5887 /meta
parent6aa55dd279b14b34f334b8d70f7046720fc6764d (diff)
downloadpoky-7f73831fde4c3e31bda5631ed966f33d8e9c9d45.tar.gz
go: Exclude CVE-2021-29923 from report list
Upstream don't believe it is a signifiant real world issue and will only fix in 1.17 onwards. Therefore exclude it from our reports. https://github.com/golang/go/issues/30999#issuecomment-910470358 (From OE-Core rev: 9dfc6abbb83f8792fbfa1acb9c0fe4ab23872d8f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5bd5faf0c34b47b2443975d66b71482d2380a01a) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta')
-rw-r--r--meta/recipes-devtools/go/go-1.14.inc6
1 files changed, 6 insertions, 0 deletions
diff --git a/meta/recipes-devtools/go/go-1.14.inc b/meta/recipes-devtools/go/go-1.14.inc
index 3dfd671d11..50136ca841 100644
--- a/meta/recipes-devtools/go/go-1.14.inc
+++ b/meta/recipes-devtools/go/go-1.14.inc
@@ -19,3 +19,9 @@ SRC_URI += "\
19" 19"
20SRC_URI_append_libc-musl = " file://0009-ld-replace-glibc-dynamic-linker-with-musl.patch" 20SRC_URI_append_libc-musl = " file://0009-ld-replace-glibc-dynamic-linker-with-musl.patch"
21SRC_URI[main.sha256sum] = "7ed13b2209e54a451835997f78035530b331c5b6943cdcd68a3d815fdc009149" 21SRC_URI[main.sha256sum] = "7ed13b2209e54a451835997f78035530b331c5b6943cdcd68a3d815fdc009149"
22
23# Upstream don't believe it is a signifiant real world issue and will only
24# fix in 1.17 onwards where we can drop this.
25# https://github.com/golang/go/issues/30999#issuecomment-910470358
26CVE_CHECK_WHITELIST += "CVE-2021-29923"
27