From 6ac9ed94d2a3b47e3b6910a8c4ef984f2a8f0253 Mon Sep 17 00:00:00 2001 From: Richard Purdie Date: Mon, 10 May 2021 13:36:02 +0100 Subject: qemu: Exclude CVE-2018-18438 from cve-check The issues were investigated and found not to be an issue therefore exclude from checks. (From OE-Core rev: 05f39301ab19a968916163b2d8f65beda7c09852) Signed-off-by: Richard Purdie (cherry picked from commit ee6ee9bd489c126b99d15c1011560df2f840a6e9) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie --- meta/recipes-devtools/qemu/qemu.inc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/meta/recipes-devtools/qemu/qemu.inc b/meta/recipes-devtools/qemu/qemu.inc index 396ff1c5eb..8f927bdf54 100644 --- a/meta/recipes-devtools/qemu/qemu.inc +++ b/meta/recipes-devtools/qemu/qemu.inc @@ -68,6 +68,10 @@ CVE_CHECK_WHITELIST += "CVE-2017-5957" # enable it by default. CVE_CHECK_WHITELIST += "CVE-2007-0998" +# 'The issues identified by this CVE were determined to not constitute a vulnerability.' +# https://bugzilla.redhat.com/show_bug.cgi?id=1609015#c11 +CVE_CHECK_WHITELIST += "CVE-2018-18438" + COMPATIBLE_HOST_mipsarchn32 = "null" COMPATIBLE_HOST_mipsarchn64 = "null" -- cgit v1.2.3-54-g00ecf