summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--meta/conf/distro/include/cve-extra-exclusions.inc4
1 files changed, 2 insertions, 2 deletions
diff --git a/meta/conf/distro/include/cve-extra-exclusions.inc b/meta/conf/distro/include/cve-extra-exclusions.inc
index 61fb08dbeb..9d4422bc0f 100644
--- a/meta/conf/distro/include/cve-extra-exclusions.inc
+++ b/meta/conf/distro/include/cve-extra-exclusions.inc
@@ -122,6 +122,6 @@ We'll pick up any fix when upstream accepts one."
122 122
123# nasm:nasm-native https://nvd.nist.gov/vuln/detail/CVE-2020-18974 123# nasm:nasm-native https://nvd.nist.gov/vuln/detail/CVE-2020-18974
124CVE_STATUS[CVE-2020-18974] = "upstream-wontfix: \ 124CVE_STATUS[CVE-2020-18974] = "upstream-wontfix: \
125It is a fuzzing related buffer overflow. It is of low impact since most devices 125It is a fuzzing related buffer overflow. It is of low impact since most devices \
126wouldn't expose an assembler. The upstream is inactive and there is little to be 126wouldn't expose an assembler. The upstream is inactive and there is little to be \
127done about the bug, ignore from an OE perspective." 127done about the bug, ignore from an OE perspective."