From 6f647a9e06c4ea063ef3adb9600e0590aa908267 Mon Sep 17 00:00:00 2001 From: Richard Purdie Date: Tue, 11 May 2021 13:47:54 +0100 Subject: bluez: Exclude CVE-2020-12352 CVE-2020-24490 from cve-check These CVEs are fixed with kernel changes and don't affect the bluez recipe. (From OE-Core rev: 21b6975cc6c785aa3bf7f7d4ea2400e11f1800bd) Signed-off-by: Richard Purdie --- meta/recipes-connectivity/bluez5/bluez5_5.56.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-connectivity/bluez5/bluez5_5.56.bb b/meta/recipes-connectivity/bluez5/bluez5_5.56.bb index 676cb2dbb2..ae0f72b678 100644 --- a/meta/recipes-connectivity/bluez5/bluez5_5.56.bb +++ b/meta/recipes-connectivity/bluez5/bluez5_5.56.bb @@ -3,6 +3,9 @@ require bluez5.inc SRC_URI[md5sum] = "e6c51b2aefa7c56ff072819a78611fa5" SRC_URI[sha256sum] = "59c4dba9fc8aae2a6a5f8f12f19bc1b0c2dc27355c7ca3123eed3fe6bd7d0b9d" +# These issues have kernel fixes rather than bluez fixes so exclude here +CVE_CHECK_WHITELIST += "CVE-2020-12352 CVE-2020-24490" + # noinst programs in Makefile.tools that are conditional on READLINE # support NOINST_TOOLS_READLINE ?= " \ -- cgit v1.2.3-54-g00ecf